[ {"cve_id":"CVE-2026-55847","description":"Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the ansi.js helper at allure-generator/src/main/javascript/helpers/ansi.js passes attacker-influenced statusMessage and statusTrace values through AnsiToHtml without HTML escaping and wraps the result in Handlebars SafeString, disabling template auto-escaping in allure-generator/src/main/javascript/blocks/status-details/status-details.hbs. JunitXmlPlugin.java can populate these fields directly from crafted JUnit XML failure messages and traces, and equivalent input flows exist in the TRX, xUnit XML, xctest, and Allure1 and Allure2 plugins. When a user views the affected status details, unescaped markup executes arbitrary JavaScript in the report origin, which can expose report data and compromise sessions associated with that origin. This is an incomplete-fix case because PR 3271 escaped link helpers but did not address the ANSI helper. This issue is fixed in version 2.39.0.","exploit_maturity":"No public exploit","published":"2026-09-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-55846","description":"Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the HTTP server started by allure serve and allure open uses URI.getPath() in Commands.setUpServer() in allure-commandline/src/main/java/io/qameta/allure/Commands.java and passes the percent-decoded request path to reportDirectory.resolve() without normalizing the result or confirming that it remains inside that directory. An unauthenticated client that can reach the server can submit parent-directory segments, including percent-encoded segments, and cause serveFile() to return any regular file readable by the Allure process. The server binds to localhost by default, but the --host option can expose it to other systems, and local users, adjacent containers, or browser-origin attacks may reach a local listener. This can disclose credentials, configuration, source code, build secrets, and other CI/CD data. This issue is fixed in version 2.39.0.","exploit_maturity":"No public exploit","published":"2026-09-14","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-89298","description":"A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients role accesses the client registration endpoint to retrieve client details. Due to a failure to mask sensitive information, the service returns the client's confidential secret in cleartext. This could allow a read-only administrator to obtain full access to the affected client's account and potentially escalate their privileges within the realm.","exploit_maturity":"No public exploit","published":"2026-09-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-49463","description":"NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. The `nl.nl-portal:documenten-api` package through version 3.0.0 and the `nl.nl-portal:besluiten` package from version 1.5.0 through 3.0.0 lack per-user authorization in GraphQL resolvers, allowing an authenticated user to access other users’ document contents, decisions, audit trails, and decision attachments. Version 3.0.1 contains a patch. As a workaround, block the affected document-content and decision-related GraphQL operations at the API gateway or block their GraphQL types entirely.","exploit_maturity":"No public exploit","published":"2026-09-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-49439","description":"OpenRemote is an open-source internet-of-things platform. Prior to version 1.24.1, the predicted datapoint write endpoint allows users with only `read:assets` privileges to write predicted datapoints. Version 1.24.1 fixes the issue.","exploit_maturity":"No public exploit","published":"2026-09-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-9667","description":"IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) that could allow a remote, unauthenticated attacker to cause the server to send outbound requests to arbitrary endpoints.","exploit_maturity":"No public exploit","published":"2026-09-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-9338","description":"IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to trigger excessive resource consumption, potentially leading to reduced availability of the affected service.","exploit_maturity":"No public exploit","published":"2026-09-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-9336","description":"IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space.","exploit_maturity":"No public exploit","published":"2026-09-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-9327","description":"IBM WebSphere Application Server 9.0, and 8.5 could allow an authenticated user with a low-privilege administrative role to modify security configuration. This could result in information disclosure or denial of service.","exploit_maturity":"No public exploit","published":"2026-09-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-9176","description":"IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls. A local attacker could exploit this vulnerability to escalate privileges and gain unauthorized access to protected resources.","exploit_maturity":"No public exploit","published":"2026-09-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-89089","description":"A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user (ROLE_USER) can run the shipped, default-enabled online reports \"Maintenance contracts expired\" (AssetManagementMaintExpired) and \"Maintenance contracts strategy\" (AssetManagementMaintStrategy) via the reporting REST API (POST /rest/reports/{id}) and supply a DATE_FORMAT parameter that the report templates substitute literally, un-escaped, into their SQL queries. This lets an attacker execute arbitrary SQL against the OpenNMS database and read arbitrary data, including database-stored secrets such as provisioning and notification credentials and SNMP community strings.\n\n\n\nThe solution is to upgrade to Meridian 2024.3.13, 2025.0.10 and Horizon 36.0.4 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.","exploit_maturity":"No public exploit","published":"2026-09-10","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-89045","description":"zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely while holding the stream monitor, blocking all other threads from accessing the stream.","exploit_maturity":"No public exploit","published":"2026-09-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-89044","description":"Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final fail to properly validate the final transfer coding in the Transfer-Encoding header, allowing attackers to smuggle requests by using malformed encoding declarations. Attackers can split Transfer-Encoding headers across multiple lines or use values like 'chunked, xchunked' to bypass validation and decode messages as chunked when the final coding is not chunked, enabling request smuggling attacks.","exploit_maturity":"No public exploit","published":"2026-09-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-88770","description":"A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and access management solution. The issue occurs because the token redemption process fails to check if a user account is currently locked due to brute-force protection. If an attacker has an active session for a locked account, they can complete the device login process and receive new security tokens. This allows the attacker to maintain access to the account even when it should be temporarily disabled to prevent unauthorized entry.","exploit_maturity":"No public exploit","published":"2026-09-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-75880","description":"An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excessive evaluation during message delivery attempts, occupying a shared broker thread and leading to denial of service.\n\nThis issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0.\n\n\nUsers are recommended to upgrade to version 2.57.0, which fixes this issue.","exploit_maturity":"No public exploit","published":"2026-09-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57822","description":"When the broker is processing message-based management requests, sent by an authenticated messaging client that is authorized with MANAGE permission to perform management-via-messaging, the parameter processing can trigger Java deserialization of certain method parameters that the broker will not utilise. The permitted types allow to craft a payload causing excessive computation and pinning the processing thread, leading to denial of service.\n\n\n\n\nThis issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.3.0 through 2.44.0.\n\n\n\nUsers are recommended to upgrade to version 2.57.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-09-10","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-19596","description":"An XML External Entity (XXE) vulnerability exists in the XML collector of multiple versions of OpenNMS Meridian and Horizon. When OpenNMS collects XML from a source whose response is attacker-controlled (for example a compromised monitored host or an HTTP man-in-the-middle position), the collector's XML parser resolves external entities and external DTDs. This allows an attacker to read files accessible to the OpenNMS service account, including database credentials, and to induce out-of-band requests.\n\n\n\nThe solution is to upgrade to Meridian 2024.3.13, 2025.0.10 and Horizon 36.0.4 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.","exploit_maturity":"No public exploit","published":"2026-09-10","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-19729","description":"A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak. The issue occurs because a previous fix for path probing was incomplete, allowing a realm administrator to still submit arbitrary filesystem paths as keystore parameters. This can be used to determine the existence and readability of files on the server, potentially exposing sensitive system information.","exploit_maturity":"No public exploit","published":"2026-09-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-86597","description":"Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the available log redaction did not cover all affected log paths and data types. An attacker with read access to the log destination, whether the local filesystem, a log aggregation service, or a CI/CD artifact store, could obtain credentials and decryption keys that, if still valid at the time of access, could be used to authenticate to the corresponding Snowflake account or cloud-storage object. Successful exploitation requires read access to the log destination, and impact is bounded by credential lifetime and object scope. The fix is available in Snowflake Connector for Python v4.7.3, Snowflake Go Driver v2.2.0, Snowflake JDBC Driver v4.3.4 (including the snowflake-jdbc-fips and snowflake-jdbc-thin), Snowflake Node.js Driver v3.3.0, Snowflake PHP PDO Driver v4.2.0, and Snowflake ODBC Driver v3.20.0. Users must manually upgrade and should securely delete previously generated diagnostic logs containing sensitive information where retention is not required.","exploit_maturity":"No public exploit","published":"2026-09-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-85528","description":"Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint. An attacker able to control the account value could cause the driver to transmit a reusable login credential to a host of their choosing and replay it to obtain the privileges granted to that credential. Successful exploitation requires an application using jdbc:snowflake:auto with a connections.toml section that omits an explicit host and a lower-trust principal able to set the account value; ordinary JDBC URLs are unaffected. The fix is available in Snowflake JDBC Driver version 4.3.4, including the snowflake-jdbc-fips and snowflake-jdbc-thin. Users must manually upgrade.","exploit_maturity":"No public exploit","published":"2026-09-04","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84677","description":"Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names, descriptions, and version metadata) on plugin download index pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a plugin for hosting.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84676","description":"Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84674","description":"Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84666","description":"Jenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the plugin's history recording configuration through Stapler data binding, allowing attackers to redirect history storage to an attacker-specified directory and modify history recording settings.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84664","description":"Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84663","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and earlier allows attackers to delete shared library caches.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84662","description":"Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84661","description":"A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds awaited by the `waitForBuild` step when the `propagateAbort` parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84660","description":"A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds triggered by the `build` step to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84659","description":"Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that controls the \"Force the use of the sandbox globally in the system\" setting, allowing attackers to disable it through Stapler data binding.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84658","description":"Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor` annotation on a constructor that loads script approval configuration, allowing attackers able to submit certain forms to read that configuration.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84657","description":"In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission when using the -s flag to cancel a build triggered to wait for completion, allowing attackers with Item/Build permission to cancel builds started by other users.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84656","description":"A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one job to read build parameter names and values of jobs they have no access to.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84655","description":"Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON and Python through its REST API, allowing attackers able to control map property names to inject arbitrary fields into JSON and Python API responses.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84654","description":"In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, form data binding allows setting public static fields of the bound configuration object, allowing attackers who can submit configuration forms to modify public static fields of the configuration objects those forms are bound to, resulting in changes that apply globally to the Jenkins instance.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84651","description":"In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a different agent by specifying that agent's name in the submitted XML document, allowing attackers with Agent/Configure permission on one agent to take over a different agent, gaining control of its configuration and obtaining access to its inbound agent secret and environment variables.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-84646","description":"In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-82968","description":"A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacker with a different account on the same social provider to intercept the process and link their own account to the victim's local profile, gaining unauthorized access.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-49833","description":"DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, 9.0-rc1 to before 9.3, and 10-rc1 to before 10.0, a path traversal vulnerability is possible via the COAR Notify / LDN service in DSpace. The attacker MUST already have DSpace administrator credentials in order to perform the attack. When reading a file input stream of an \"inbound pattern\" / \"template\", used to generate an LDN message, the LDN class does not check for path traversal or restrict the templates to a known base path. This could allow an untrusted file from elsewhere in the file system (e.g. an export log, a bitstream path, a temporary file) to be read and interpreted as an Apache Velocity template. This issue has been patched in versions 8.4, 9.3, and 10.0.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-49831","description":"DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.7, 8.4, 9.3, and 10.0, the Curation Task feature allows an output path to be used by the reporter (-r parameter), typically used to stream results and status of curation task operations. It is not restricted to any particular base path, meaning that any path writable by the DSpace (often 'tomcat') user is allowed. This constitutes a Path Traversal Vulnerability in the curate script. This issue has been patched in versions 7.6.7, 8.4, 9.3, and 10.0.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-49830","description":"DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.7, 8.4, 9.3, and 10.0, when ingesting an aggregated ORE resource by URI (using the OAI-ORE Harvester), the ORE Ingestion Crosswalk does not validate the URI scheme. This may allow for local file inclusion via malicious paths like file:///etc/passwd. The attacker MUST already have DSpace collection administrator privileges in order to perform the attack. This issue has been patched in versions 7.6.7, 8.4, 9.3, and 10.0.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-32773","description":"There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to generate arbitrary unescaped frontend code which could lead to a minimal privilege escalation in browser. Users are encouraged to upgrade to Spark 3.5.8 or later.\n\nThis CVE is marked as \"low\" since the path to exploit requires both relatively high permissions (ability to launch a Spark job) and requires tricking a user with higher permissions to log in and visit the Spark history web page.\n\nUsers are encouraged to upgrade their Spark history servers to Spark 3.5.8 or later.","exploit_maturity":"No public exploit","published":"2026-09-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-83557","description":"DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. It denies polymorphic resolution only for a fixed set of \"unsafe base types\", and its isSafeSubType method returns true unconditionally for every base type outside that set. java.lang.Comparable was absent from the list despite being implemented by a very large fraction of JDK and application classes, comparable in breadth to java.io.Serializable, which is on the list for that reason. An application declaring an @JsonTypeInfo-annotated property or class with Comparable as its base type, and no custom PolymorphicTypeValidator, will accept a type identifier for essentially any class implementing Comparable. This yields an attacker-controlled object instantiation primitive; a demonstrated case constructs a java.io.File for an arbitrary attacker-chosen path, which becomes path-traversal-adjacent if the application subsequently calls path-sensitive methods on the value. No class implementing Comparable has been identified that yields code execution through deserialization alone. Global Default Typing via activateDefaultTyping is not affected, because that method structurally requires an explicit PolymorphicTypeValidator argument. This affects com.fasterxml.jackson.core:jackson-databind from 2.11.0 before 2.18.10, from 2.19.0 before 2.21.6, and from 2.22.0 before 2.22.2, and tools.jackson.core:jackson-databind from 3.0.0 before 3.1.6 and from 3.2.0 before 3.2.2. Users should upgrade to 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2.","exploit_maturity":"Proof of concept only","published":"2026-09-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-19032","description":"jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deserialize, a string bound from untrusted JSON is passed to new URI(value) and then to Path.of(uri). When that throws FileSystemNotFoundException, the code enumerates ServiceLoader\u003cFileSystemProvider\u003e and calls provider.getPath(uri) on the first provider whose scheme matches the attacker-chosen scheme. Untrusted JSON can therefore select and drive an arbitrary registered FileSystemProvider during readValue under a default JsonMapper, and forces provider class loading at the same time. With only the JDK built-in providers (file, jar/zipfs) present, the resolved path is inert and no mount or network I/O occurs; further impact requires a side-effecting third-party FileSystemProvider on the classpath. This affects com.fasterxml.jackson.core:jackson-databind from 2.8.0 before 2.18.10, from 2.19.0 before 2.21.6, and from 2.22.0 before 2.22.2, and tools.jackson.core:jackson-databind from 3.0.0 before 3.1.6 and from 3.2.0 before 3.2.2. Users should upgrade to 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2. Binding java.nio.file.Path from untrusted JSON should be avoided regardless of version.","exploit_maturity":"Proof of concept only","published":"2026-09-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-76986","description":"Improper neutralization of input during web page generation in Apache Wicket.\n\norg.apache.wicket.markup.html.form.AbstractSingleSelectChoice, the base class of DropDownChoice, writes the body of the default option — the entry shown when no choice is selected — into the markup as it is, while every other option body in the same select is escaped according to the escape-model-strings setting. The body comes from getNullValidDisplayValue() or getNullKeyDisplayValue(), both of which are protected, so what they return is not necessarily the plain text the default implementation reads from a resource bundle.\n\nAn application is affected where it overrides one of those methods and returns a value holding data an attacker can influence, or where its own nullValid or null bundle entry holds such a value. The bundles shipped with Wicket contain plain text. RadioChoice overrides getDefaultChoice to emit no default option and is not affected.\n\nAs a workaround, escape the value in the override.\n\nThis issue affects Apache Wicket: from 8.0.0 through 8.18.0, from 9.0.0 through 9.23.0, from 10.0.0 through 10.10.0. Older, unsupported releases from 1.5.0 onwards are also affected. Users are recommended to upgrade to version 8.19.0, 9.24.0 or 10.11.0, which fix the issue.","exploit_maturity":"No public exploit","published":"2026-08-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-76985","description":"Improper neutralization of input during web page generation in Apache Wicket.\n\norg.apache.wicket.extensions.markup.html.form.palette.component.AbstractOptions, which renders the two option lists of a Palette, escapes the id and the display value of each option according to the escape-model-strings setting, and wrote the attribute names and values returned by getAdditionalAttributes into the \u003coption\u003e tag as they came.\n\nAn application is affected where it overrides Palette.getAdditionalAttributesForChoices, Palette.getAdditionalAttributesForSelection or AbstractOptions.getAdditionalAttributes and returns a value holding data an attacker can influence. These methods return null by default, so an application that does not override them is not affected.\n\nAs a workaround, escape the values in the override.\n\nThis issue affects Apache Wicket: from 8.0.0 through 8.18.0, from 9.0.0 through 9.23.0, from 10.0.0 through 10.10.0. Older, unsupported releases from 1.4.0 onwards are also affected. Users are recommended to upgrade to version 8.19.0, 9.24.0 or 10.11.0, which fix the issue.","exploit_maturity":"No public exploit","published":"2026-08-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-76984","description":"Improper neutralization of input during web page generation in Apache Wicket.\n\norg.apache.wicket.markup.head.MetaDataHeaderItem generates \u003cmeta\u003e and \u003clink\u003e header tags. It escaped the attribute names it wrote, but ran the attribute values through a replacement of \" with \\\". A backslash before a double quote means nothing in HTML, so a value containing a double quote ends its own attribute and what follows is parsed as further attributes of the generated tag.\n\nAn application is affected where it supplies an attribute value holding data an attacker can influence, through addTagAttribute or the forMetaTag and forLinkTag factory methods. A value may be given as an IModel, so it is not necessarily a literal.\n\nThere is no setting to change; an application can only avoid supplying a value that contains a double quote. Note that these values have never been escaped effectively: before the change released in 6.24.0, 7.4.0 and 8.0.0 they were written with no escaping at all.\n\nThis issue affects Apache Wicket: from 8.0.0 through 8.18.0, from 9.0.0 through 9.23.0, from 10.0.0 through 10.10.0. Older, unsupported releases from 6.17.0 onwards are also affected. Users are recommended to upgrade to version 8.19.0, 9.24.0 or 10.11.0, which fix the issue.","exploit_maturity":"No public exploit","published":"2026-08-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-76983","description":"Improper neutralization of input during web page generation in Apache Wicket.\n\nThe \u003cwicket:label\u003e tag is provided by org.apache.wicket.markup.html.form.AutoLabelTextResolver, which is registered by default in every WebApplication. The resolver writes the label it finds into the markup as it is, and reads no escaping setting at all, so markup in a label is rendered as markup.\n\nWhen the label comes from the labelled component's label model, set through FormComponent#setLabel(IModel), it is written to the markup unescaped. An application is affected where the label of a form component holds data an attacker can influence. Wicket cannot determine where a model value comes from, so whether it reaches the page from a request or from storage is a property of the application.\n\nThere is no workaround. Unlike every other rendering path in Wicket, the resolver never consulted the escape-model-strings setting, so an application had no way to ask for the label to be escaped.\n\nThe body of a \u003cwicket:label\u003e tag is markup by design and is not affected; it remains the supported way to place markup in a label.\n\nThis issue affects Apache Wicket: from 8.0.0 through 8.18.0, from 9.0.0 through 9.23.0, from 10.0.0 through 10.10.0. Older, unsupported releases from 1.5.0 onwards are also affected. Users are recommended to upgrade to version 8.19.0, 9.24.0 or 10.11.0, which fix the issue.","exploit_maturity":"No public exploit","published":"2026-08-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-76982","description":"Improper neutralization of input during web page generation in Apache Wicket.\n\norg.apache.wicket.markup.html.form.Button clears the escape-model-strings flag in its constructor, so that the value attribute it writes is not encoded twice — ComponentTag already encodes attribute values when it writes the tag. That reasoning holds only for the attribute. When the component is attached to a \u003cbutton\u003e element rather than an \u003cinput\u003e, it writes its model object into the element body instead, and nothing encodes an element body, so markup in the model is rendered as markup.\n\nAn application is affected where it renders a Button on a \u003cbutton\u003e element and that button's model holds data an attacker can influence. Wicket cannot determine where a model value comes from, so whether it reaches the page from a request or from storage is a property of the application. The subclasses that inherit this constructor — AjaxButton, AjaxFallbackButton and WizardButton — are affected on the same terms.\n\nAs a workaround, calling setEscapeModelStrings(true) on a button that renders as a \u003cbutton\u003e element escapes the body correctly, and does not cause double encoding, because the value attribute is written only for \u003cinput\u003e elements.\n\nThis issue affects Apache Wicket: from 8.0.0 through 8.18.0, from 9.0.0 through 9.23.0, from 10.0.0 through 10.10.0. Older, unsupported releases from 6.25.0 and 7.5.0 onwards are also affected.\n\nUsers are recommended to upgrade to version 8.19.0, 9.24.0 or 10.11.0, which fix the issue.","exploit_maturity":"No public exploit","published":"2026-08-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-75802","description":"AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writes the display value obtained from that renderer into the label's markup without applying the HTML escaping Wicket performs by default for component model values. An attacker who can influence the choice or model data rendered by such a label can inject HTML or script that executes in the browser of any user who views the page. The same value is correctly escaped when the component's dropdown editor renders it as an option, so only the label rendering is affected.\n\nAjaxEditableLabel, AjaxEditableChoiceLabel and AjaxEditableMultiLineLabel write the value returned by the protected defaultNullLabel() method into the label's markup the same way when the component's model is empty, while the model value they show otherwise is escaped. The default implementation returns a constant, so an application is affected where it overrides that method and returns a value an attacker can influence.\n\nNeither value could be escaped by configuration, because escapeModelStrings had no effect on any of the three components: it is read by the label they render with rather than by the component itself, and nothing carried the setting across.\n\nThis issue affects Apache Wicket: from 8.0.0 through 8.18.0, from 9.0.0 through 9.23.0, from 10.0.0 through 10.10.0. Older, unsupported releases are also affected; the display value from the renderer since 6.22.0 and the null label since 1.4.0. Users are recommended to upgrade to version 8.19.0, 9.24.0 or 10.11.0, which fix the issue.","exploit_maturity":"No public exploit","published":"2026-08-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71378","description":"ResourceIsolationRequestCycleListener protects a Wicket application against cross-site request forgery by rejecting requests that a resource isolation policy judges to come from another origin. Its default policy, FetchMetadataResourceIsolationPolicy, was derived from a reference implementation written to guard static resources, and it inherited two allowances that are unsafe when the thing being guarded is an action on a page:\n * Every \"simple top-level navigation\" was allowed. Any GET request carrying Sec-Fetch-Mode: navigate whose Sec-Fetch-Dest was neither object nor embed was allowed, whatever Sec-Fetch-Site said — including cross-site. Wicket invokes component listeners (Link.onClick(), form submits, behaviour callbacks) through ordinary GET navigations, so a page under an attacker's control could navigate the victim's browser to a listener URL and have that listener run inside the victim's authenticated session. Browsers send SameSite=Lax cookies — the effective default when no SameSite attribute is set — on cross-site top-level GET navigations, so the victim's session cookie accompanied the request.\n * Sec-Fetch-Site: same-site was allowed unconditionally. That value means the same registrable domain and scheme but a different origin — another subdomain or another port. Any sibling origin could therefore invoke any listener by any method, POST form submits included, and cookies are always sent on same-site requests regardless of SameSite. A hostile sibling origin obtained through a subdomain takeover, through delegated user content, or through an XSS elsewhere on the site could act as the authenticated user.\nUsers are recommended to upgrade to version 9.24.0 or 10.11.0, which fix the issue.\nAffected versions\n\n * Apache Wicket 9.1.0 through 9.23.0\n * Apache Wicket 10.0.0 through 10.10.0\n\n\n\nNot affected\n\nAny release older than 9.1.0:\n * Apache Wicket 8.x (8.0.0 through 8.17.0). The resource isolation classes do not exist in the 8.x line, which offers only the Origin/Referer-based CsrfPreventionRequestCycleListener. No 8.x release requires a fix.\n * Apache Wicket 9.0.0. ResourceIsolationRequestCycleListener and FetchMetadataResourceIsolationPolicy were introduced by WICKET-6786 and first shipped in 9.1.0 (released 2020-10-07).","exploit_maturity":"No public exploit","published":"2026-08-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70449","description":"Improper validation of resource URL attributes in Apache Wicket allows an unauthenticated remote attacker to read files from the web application, including files under WEB-INF that the servlet container would not otherwise serve.\n\nThe locale, style and variation attributes decoded from a package resource URL are spliced into the resource lookup path without being checked for path separators. The IPackageResourceGuard — whose rejection of .. is one of the two intended controls — is applied to the resource name before those attributes are appended, and WebApplicationPath rejects only paths literally beginning with WEB-INF/. Neither control ever inspects the attacker-controlled portion of the path. On servlet containers that normalize .. in ServletContext.getResource(), a crafted request therefore escapes the intended package directory.\n\nThe set of readable files is limited to the file extensions permitted by the configured IPackageResourceGuard. The default SecurePackageResourceGuard permits only js, css, png, jpg, jpeg, gif, ico, cur, map, html, txt, swf, bmp, svg, avif, eot, ttf, woff and woff2, which excludes configuration formats. Applications that have added patterns to the guard, or replaced it with the blocklist-based PackageResourceGuard, can additionally disclose configuration files such as web.xml. Independently of the extension, the lookup performed before the guard runs acts as an existence oracle for arbitrary paths.\n\nThis issue affects Apache Wicket 8.18.0 and before, 9.23.0 and before and 10.10.0 and before.\n\nUsers are recommended to upgrade to version 8.19.0, 9.24.0 or 10.11.0, which fix the issue. Users of Apache Wicket 7.x or older, which are no longer supported, should upgrade to a supported version.","exploit_maturity":"No public exploit","published":"2026-08-31","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-58301","description":"When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vulnerability affects Apache Shiro versions 2.x through 3.0.0 only in deployments that use the Jakarta EE integration module.\n\nMitigation: Upgrade to version 3.0.1 or later, which fixes the issue. +\nAlternatively, you can set the `org.apache.shiro.form-resubmit-host` (String) and `org.apache.shiro.form-resubmit-port` (Integer) system properties to restrict the host and port that Shiro will connect to when resubmitting a form.","exploit_maturity":"No public exploit","published":"2026-08-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-55867","description":"Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/{userId}/tokens/{idOrToken} endpoint implemented by UsersResource.revokeToken() in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java checks USERS_TOKENREMOVE permission against the attacker-controlled userId path parameter before resolving the token selected by idOrToken. An authenticated user can provide an authorized userId while accessTokenService.loadById() or accessTokenService.load() resolves a token belonging to another user, including a service account or administrator, after which accessTokenService.destroy() deletes that token without checking AccessToken.getUserName(). The issue does not expose token contents, but unauthorized deletion causes integrity impact and can disrupt access-token-based integrations. This issue is fixed in versions 6.3.12, 7.0.7, and 7.1.2.","exploit_maturity":"No public exploit","published":"2026-08-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-55860","description":"MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a secure connection. A hostile or man-in-the-middle MariaDB server can send an AuthSwitchRequest naming mysql_clear_password or dialog (PAM) over a plain-TCP unencrypted connection, and AuthenticationFlow permits ClearPasswordPluginFlow or PamPluginFlow to return the user's password as cleartext bytes on the wire. The disclosed credentials can subsequently be used to authenticate directly to the database server. This issue is fixed in version 1.4.1.","exploit_maturity":"No public exploit","published":"2026-08-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-55859","description":"MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to character_set_client through the OK-packet session-state-tracking mechanism, including through SET NAMES executed by a stored routine or trigger, server configuration, or a hostile or man-in-the-middle server. If the new character set is not UTF-8, the driver continues to exchange UTF-8 while the server interprets the same bytes under a different encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value raises R2dbcNonTransientResourceException with SQLState 08000 and closes the connection. This issue is fixed in version 1.4.1.","exploit_maturity":"No public exploit","published":"2026-08-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-55858","description":"MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The server can report a mid-session change to character_set_client through OK-packet session-state tracking, including a change caused by SET NAMES, a stored routine or trigger, server configuration, or a hostile server. If character_set_client changes to a non-UTF-8 value, the driver continues to read and write UTF-8 while the server interprets the same bytes under another encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value causes SQLException with SQLState 08000 and closes the connection. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.","exploit_maturity":"No public exploit","published":"2026-08-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-55857","description":"MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysql_clear_password plugin is gated behind a secure transport, but the sibling PAM handler SendPamAuthPacketFactory, named dialog by the server, does not declare that requirement and inherits the default secure-required value false; older branches implement the same affected behavior in SendPamAuthPacket. A hostile or man-in-the-middle server can send an Authentication Switch Request for dialog over plain TCP, causing the driver to return the user's password in cleartext when sslMode=DISABLE and restrictedAuth=null, which is the default configuration. Properly verified TLS and local Unix sockets are not exposed to this transport vector. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.","exploit_maturity":"No public exploit","published":"2026-08-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-55856","description":"MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java application connects with sslMode=verify-full or sslMode=verify-ca, supplies a password, and does not configure serverSslCert or trustStore, Connector/J can accept an untrusted self-signed certificate through the fallbackToSystemTrustStore=true ephemeral trust manager and record its certFingerprint for later identity binding. The OK-packet and authentication-switch paths enforce the certificate fingerprint, but the initial-handshake path does not. HandshakeResponse.encode() can therefore build and send a mysql_clear_password response before checking certFingerprint != null \u0026\u0026 !isMitMProof(), sslMode, or whether the authentication plugin is resistant to a man-in-the-middle, and the initial path also bypasses restrictedAuth. An active man-in-the-middle or hostile server can present a self-signed certificate, claim to be MariaDB, select mysql_clear_password as the initial authentication plugin, and receive the full database password before the connection is rejected. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.","exploit_maturity":"No public exploit","published":"2026-08-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-55566","description":"Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs processes attacker-controlled data from the /ext URL route in yamcs-web/src/main/webapp/projects/webapp/src/app/core/routes/extension.matcher.ts, extension.component.ts, and app.component.ts without checking registered plugin IDs before DOM rendering through innerHTML. A crafted URL can execute JavaScript when opened by a user. The script can read data available to the Yamcs web application and perform actions in the user context. This issue is fixed in versions 5.12.8 and 5.13.2.","exploit_maturity":"Proof of concept only","published":"2026-08-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-55549","description":"Yamcs is a mission control framework. Prior to 5.9.4, Yamcs reflects an attacker-controlled redirect_uri parameter from GET /auth/authorize into yamcs-core/src/main/resources/auth/templates/authorize.html without adequate HTML escaping by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.java and yamcs-core/src/main/java/org/yamcs/http/HandlerContext.java. A crafted authorization URL can execute JavaScript when opened by a Yamcs user. The script can access browser-held authentication material and transmit it to an attacker, enabling account compromise. This issue is fixed in version 5.9.4.","exploit_maturity":"Proof of concept only","published":"2026-08-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-55547","description":"Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits SystemPrivilege.ControlAccess checks from IamApi.listRoles, IamApi.getRole, and IamApi.listPrivileges in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java. Any authenticated account can call GET /api/roles, GET /api/roles/{name}, and GET /api/privileges to enumerate available system privileges and configured role mappings. The disclosure reveals security configuration that can support targeted privilege-escalation attempts. This issue is fixed in versions 5.12.8 and 5.13.2.","exploit_maturity":"Proof of concept only","published":"2026-08-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-55545","description":"Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs WebSocket subscription handlers fail to enforce the privileges required by equivalent REST endpoints. PacketsApi.subscribePackets exposes the packets WebSocket topic without ObjectPrivilegeType.ReadPacket, ProcessingApi.subscribeAlgorithmStatus exposes the algorithm-status WebSocket topic without ObjectPrivilegeType.ReadAlgorithm, and MdbOverrideApi.subscribeMdbChanges exposes the mdb-changes WebSocket topic without SystemPrivilege.GetMissionDatabase. A low-privilege authenticated user can receive telemetry packets, algorithm status, and mission database change information outside the assigned authorization scope. This issue is fixed in versions 5.12.8 and 5.13.2.","exploit_maturity":"No public exploit","published":"2026-08-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-55425","description":"Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in graylog2-server/src/main/java/org/graylog2/rest/resources/system/contentpacks/titles/EntityTitleServiceImpl.java allows an authenticated user to request composite display fields without verifying that every selected field is readable. A user can retrieve protected values, including the password hash on a readable user record; ordinary users are limited to their own permitted records, while administrators can retrieve hashes for all users. This issue is fixed in versions 7.1.4 and 7.2.0-alpha.2.","exploit_maturity":"No public exploit","published":"2026-08-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-59355","description":"In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a request containing an invalid request_uri paired with an unvalidated redirect_uri, which can result in an open redirect to an attacker-controlled site.","exploit_maturity":"No public exploit","published":"2026-08-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-59281","description":"Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors() or Errors.getFieldError() accessors are vulnerable to arbitrary HTML/JavaScript code injection, potentially resulting in a reflected cross-site scripting (XSS) vulnerability.\nSpring Framework 7.0.0 - 7.0.8\nSpring Framework 6.2.0 - 6.2.19\nSpring Framework 6.1.0 - 6.1.28\nSpring Framework 6.0.0 - 6.0.30\nSpring Framework 5.3.0 - 5.3.49\nSpring Framework 5.2.25.RELEASE and earlier","exploit_maturity":"No public exploit","published":"2026-08-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-59280","description":"Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through SpringTemplateLoader.\nSpring Framework 7.0.0 - 7.0.8\nSpring Framework 6.2.0 - 6.2.19\nSpring Framework 6.1.0 - 6.1.28\nSpring Framework 6.0.0 - 6.0.30\nSpring Framework 5.3.0 - 5.3.49\nSpring Framework 5.2.25.RELEASE and earlier","exploit_maturity":"No public exploit","published":"2026-08-27","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-59277","description":"Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal (private) or external (public) network.\nSpring Security 7.1.0","exploit_maturity":"No public exploit","published":"2026-08-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-59276","description":"Several components in Spring Security compare security-sensitive values using standard string equality (String.equals()) rather than a constant-time comparison. Because String.equals() returns as soon as it finds a differing character, the time taken to reject an incorrect value is proportional to the number of leading characters that match the expected value.\nSpring Security 7.1.0\nSpring Security 7.0.0 - 7.0.6\nSpring Security 6.5.0 - 6.5.11\nSpring Security 6.4.0 - 6.4.18\nSpring Security 5.8.0 - 5.8.27\nSpring Security 5.7.0 - 5.7.25","exploit_maturity":"No public exploit","published":"2026-08-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-47887","description":"A Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a configured prefix is vulnerable to an open redirect.\nSpring Framework 7.0.0 - 7.0.8\nSpring Framework 6.2.0 - 6.2.19\nSpring Framework 6.1.0 - 6.1.28\nSpring Framework 6.0.0 - 6.0.30\nSpring Framework 5.3.0 - 5.3.49\nSpring Framework 5.2.25.RELEASE and earlier","exploit_maturity":"No public exploit","published":"2026-08-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-47883","description":"UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both Spring MVC and Spring WebFlux.\nSpring Framework 7.0.0 - 7.0.8\nSpring Framework 6.2.0 - 6.2.19","exploit_maturity":"No public exploit","published":"2026-08-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-47842","description":"Applications using AesBytesEncryptor with the two-argument constructor or when passing a null IV generator and CBC as the encryption mode encrypt data with AES/CBC using a null (all-zero) initialization vector.\nSpring Security 7.1.0\nSpring Security 7.0.0 - 7.0.6\nSpring Security 6.5.0 - 6.5.11\nSpring Security 6.4.0 - 6.4.18\nSpring Security 5.8.0 - 5.8.27\nSpring Security 5.7.0 - 5.7.25","exploit_maturity":"No public exploit","published":"2026-08-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-79652","description":"A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build of Keycloak. This component handles various OAuth2 and OpenID Connect grant types used for issuing access tokens. The issue occurs because the JWT Bearer grant fails to check if a client requires user consent before issuing a token. This allows an authenticated attacker with valid client credentials and a trusted identity provider assertion to bypass the consent requirement and obtain unauthorized access to a user account at a consent-gated client.","exploit_maturity":"No public exploit","published":"2026-08-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-73180","description":"Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the Jakarta WebSocket specification when the HTTP session ended.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120.\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.0 through 8.5.100, from 7.0.43 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.","exploit_maturity":"No public exploit","published":"2026-08-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-63621","description":"Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Knative component\n\nThe Knative consumer in camel-knative maps inbound CloudEvent attributes onto Camel message headers. In binary content mode the HTTP-header path filters Camel-internal headers through KnativeHttpHeaderFilterStrategy, but in structured content mode (Content-Type application/cloudevents+json) the CloudEvent extension fields are read directly from the JSON body and every extension key is copied into the Exchange headers without applying any HeaderFilterStrategy (CloudEventProcessors, spec versions 1.0, 1.0.1 and 1.0.2). As a result, an unauthenticated attacker can inject Camel-internal headers (e.g. CamelHttpUri, CamelHttpPath, CamelFileName) via a structured-mode CloudEvent request, matched case-insensitively against Camel's header map. When a route forwards messages from a Knative consumer to a header-driven component such as camel-http or camel-file, the injected headers override configured values, enabling server-side request forgery (SSRF), path traversal or message-dispatch redirection depending on the route. This is an incomplete fix of the inbound header filtering previously added for the binary content-mode path, and is the same pattern addressed in camel-cxf/camel-knative (CVE-2026-47323), camel-undertow (CVE-2025-30177), the broader incoming-header filter (CVE-2025-27636 and CVE-2025-29891), and the non-HTTP strategies (CVE-2026-40453).\n\n\nThis issue affects Apache Camel: from 3.15.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.21.0.\n\nUsers are recommended to upgrade to version 4.22.0, which fixes the issue. If users are on the 4.18.x LTS releases stream, then they are suggested to upgrade to 4.18.4. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.9. The non-LTS releases 4.15.0 through 4.17.0 and 4.19.0 through 4.21.0 are affected but do not receive a maintenance fix; users on those versions should upgrade to 4.18.4 or 4.22.0.","exploit_maturity":"No public exploit","published":"2026-08-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-60093","description":"Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.\n\n\n\nThe camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to the local filesystem through its downloadToFile operation, writing into the directory named by the fileDir endpoint option. DataLakeFileOperations.downloadToFile built the local target by joining fileDir with the remote path name exactly as the Azure SDK reported it (new File(fileDir, fileClientWrapper.getFileName())) and passed the result straight to the SDK download call, with no lexical normalization and no check that the resolved location stayed inside fileDir. The remote name is not route-controlled data: the consumer enumerates the filesystem in DataLakeConsumer.createBatchExchangesFromPath, which lists paths and creates one exchange per entry from PathItem.getName() verbatim, applying no name filtering by default. A path name containing parent-directory segments therefore resolved to a location outside the configured fileDir, letting anyone able to influence the names present in the consumed Data Lake filesystem cause Camel to create or overwrite a file at a location of their choosing, with the privileges of the Camel process. Depending on what the process can write to, overwriting a file outside the download directory can escalate beyond the loss of integrity of that file. The fileDir option is an ordinary common-group configuration parameter and carries no security marker, so nothing signalled to users that its value was not being enforced as a containment boundary. Camel's other file-download consumers - camel-file, camel-ftp, camel-smb, camel-mina-sftp and camel-azure-files - already constrained their local downloads to the configured directory using a path-segment boundary check; the camel-azure-storage-datalake download path was not covered by that work.\n\n\n\nUsers are recommended to upgrade to version 4.22.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.9. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.4. For deployments that cannot upgrade immediately, constrain the names the consumer will act on using the regex endpoint option, which is applied to each listed path name as a full-string match, so that only simple single-segment names are accepted and any name carrying a path separator or a parent-directory segment is filtered out before an exchange is created. Alternatively, avoid the downloadToFile operation on untrusted filesystems and write the payload from the route under a file name the route itself controls, rather than one taken from the remote listing. As defence in depth, treat the object names in any externally writable Data Lake filesystem as untrusted input and do not derive local filesystem paths from them.","exploit_maturity":"No public exploit","published":"2026-08-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-59230","description":"Improper input validation vulnerability in Apache Camel.\n\n\n\nThis issue affects Apache Camel: from 2.17.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.\n\n\n\nThe camel-mail component ships a MimeMultipart data format that can unmarshal a MIME multipart message. When it is configured with headersInline set to true, the unmarshal path copies the MIME headers of the incoming message onto the Camel message: it enumerates every header that is not one of the three standard ones it generates itself - Message-ID, MIME-Version and Content-Type - and calls setHeader for each, applying no HeaderFilterStrategy. The names of those MIME headers come from the message being unmarshalled, so a sender able to influence the message could place a header whose name falls in the Camel-internal namespace and have it set on the Exchange. Camel components read control headers from that namespace to override their configured behaviour - the camel-sql producer, for instance, takes the statement to execute from a Camel header when one is present - so an injected header could redirect what a downstream step in the route does with data the route author never intended it to take from the message. Which sinks are reachable, and what the consequences are, depends entirely on what the route does after the unmarshal step. The camel-mail consumer already applied a header filter strategy on its own inbound path, so this was the parallel inbound path into the same component that the earlier hardening did not cover. The affected copy is reached only when headersInline is enabled, which is not the default: with the default setting the MIME headers are surfaced as attachments rather than as message headers, and are not affected. The behaviour dates back to the introduction of the data format in 2.17.0 and was present on every release line until this fix.\n\n\n\nUsers are recommended to upgrade to version 4.22.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.9. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.4. For deployments that cannot upgrade immediately, leave headersInline at its default of false where the inline headers are not needed, since the copy is only reached when it is enabled. Where it must stay enabled, strip Camel-internal headers immediately after the unmarshal step, for example with removeHeaders(“Camel*”) placed before any processor or producer that reads control headers, and do not unmarshal MIME content from an untrusted sender into a route that dispatches on header values. As defence in depth, treat the header names of any MIME message arriving from outside the trust boundary as untrusted input.","exploit_maturity":"No public exploit","published":"2026-08-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-62380","description":"Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerabilities in the SOCKS4 (Socks4ClientEncoder) and SOCKS5 (Socks5ClientEncoder) client encoders, which fail to validate domain address and authentication (username/password) fields. An attacker able to control these fields can inject null bytes or CRLF characters to truncate or alter values, potentially enabling domain spoofing, SOCKS4 userid truncation, authentication data injection, and protocol confusion. Fixed in 4.2.17.Final and 4.1.137.Final.","exploit_maturity":"No public exploit","published":"2026-08-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-76166","description":"A flaw was found in mod_cluster's AdvertiseListenerImpl (org.jboss.modcluster core module). A single crafted UDP multicast datagram with a valid HTTP status line and a \"Server:\" header but without the \"Date:\", \"Digest:\", and \"Sequence:\" headers triggers a NullPointerException in verifyDigest() that is not caught by the worker thread's exception handler. This causes the advertise listener thread to terminate permanently. The failure is silent (isListening() continues to return true) and persists until the node is restarted. The crash occurs before the AdvertiseSecurityKey comparison, so deployments with a configured security key are still affected.","exploit_maturity":"No public exploit","published":"2026-08-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-73932","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73919","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73914","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73913","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73911","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73910","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73909","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73906","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73904","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73901","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73900","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73899","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73898","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73897","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73896","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73895","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73893","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73892","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73889","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73888","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73881","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73880","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Helidon executes to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73877","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73874","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73873","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73872","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73871","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73870","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73869","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73868","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73867","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71165","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71162","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Helidon accessible data as well as unauthorized update, insert or delete access to some of Helidon accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71161","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71157","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71156","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71154","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Helidon executes to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Helidon accessible data as well as unauthorized update, insert or delete access to some of Helidon accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71149","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 4.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71148","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71147","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 4.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71145","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71124","description":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authorization Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Access Manager. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71123","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71121","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71120","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71119","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71118","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71109","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71108","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71105","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 4.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71103","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71091","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71090","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data and unauthorized read access to a subset of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71088","description":"Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71087","description":"Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71085","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71078","description":"Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM MCAD Connector accessible data as well as unauthorized read access to a subset of Oracle Agile PLM MCAD Connector accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile PLM MCAD Connector. CVSS 3.1 Base Score 4.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71077","description":"Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71076","description":"Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71075","description":"Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM MCAD Connector accessible data as well as unauthorized update, insert or delete access to some of Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71071","description":"Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM MCAD Connector accessible data as well as unauthorized read access to a subset of Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71070","description":"Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71066","description":"Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM MCAD Connector accessible data as well as unauthorized read access to a subset of Oracle Agile PLM MCAD Connector accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile PLM MCAD Connector. CVSS 3.1 Base Score 4.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71060","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71033","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71031","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71029","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71025","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71019","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Internal operations). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71017","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71013","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71011","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71008","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. While the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71007","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. While the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71006","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71005","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71004","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-71001","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70991","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70990","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. While the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70989","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. While the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70983","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. While the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70982","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. While the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70975","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70974","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70972","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Infrastructure Technology accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70969","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70968","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70963","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Infrastructure Technology accessible data as well as unauthorized read access to a subset of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70961","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Infrastructure Technology, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Infrastructure Technology accessible data as well as unauthorized read access to a subset of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70938","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70923","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70917","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70916","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70912","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70911","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70907","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-70895","description":"Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Data Relationship Management executes to compromise Oracle Hyperion Data Relationship Management. While the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70888","description":"Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Management. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70849","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70847","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70843","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70841","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 5.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70838","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70836","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70831","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70826","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70825","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70824","description":"Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70794","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Reporting executes to compromise Oracle Hyperion Financial Reporting. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70793","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Reporting accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70789","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Reporting accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70788","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Reporting accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70784","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Reporting executes to compromise Oracle Hyperion Financial Reporting. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Reporting accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70780","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Reporting executes to compromise Oracle Hyperion Financial Reporting. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Reporting accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70775","description":"Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data as well as unauthorized read access to a subset of Oracle Installed Base accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Installed Base. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70769","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Reporting accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70768","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Financial Reporting, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Reporting accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70767","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70766","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Reporting accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70765","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Financial Reporting, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Reporting accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70759","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Reporting accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70758","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Reporting executes to compromise Oracle Hyperion Financial Reporting. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Reporting accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70754","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70753","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Reporting accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 6.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70751","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Reporting accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70732","description":"Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Application Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Mobile Application Server accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70727","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70726","description":"Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Cash Management executes to compromise Oracle Cash Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Cash Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Cash Management accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70720","description":"Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Production Scheduling. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Production Scheduling accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70719","description":"Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70716","description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Helidon accessible data. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70714","description":"Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 4.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70712","description":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in takeover of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70709","description":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile Engineering Data Management accessible data as well as unauthorized read access to a subset of Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70698","description":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in takeover of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70693","description":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70683","description":"Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70679","description":"Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70677","description":"Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Calculation Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-63336","description":"The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.client.ConnectionFactory.useSslProtocol() and ConnectionFactory.useSslProtocol(String) configure com.rabbitmq.client.TrustEverythingTrustManager and leave hostname verification disabled, causing arbitrary server certificates, including self-signed certificates, to be accepted. A network attacker able to intercept a TLS connection can impersonate the RabbitMQ broker, read protected AMQP traffic, and modify traffic without certificate or hostname validation. The fix changes the production TLS helpers to use the JVM default trust store and enables hostname verification, while retaining an explicitly named development-only no-verification helper. This issue is fixed in version 5.33.0.","exploit_maturity":"Proof of concept only","published":"2026-08-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-63335","description":"The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header whose remainingBodyBytes value is smaller than a following AMQP.FRAME_BODY payload. CommandAssembler.consumeBodyFrame subtracts the peer-controlled payload length before validating that it fits, drives remainingBodyBytes negative, and throws a raw UnsupportedOperationException instead of MalformedFrameException. A malicious or compromised broker peer can send this malformed sequence on an open nonzero channel to terminate frame processing and close the client connection, causing denial of service for work using that connection. This issue is fixed in version 5.31.0.","exploit_maturity":"Proof of concept only","published":"2026-08-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-62603","description":"Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Calculation Manager accessible data as well as unauthorized read access to a subset of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62584","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62579","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62578","description":"Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62576","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62575","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62573","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62572","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology. While the vulnerability is in Oracle Hyperion Infrastructure Technology, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62568","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Infrastructure Technology, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Infrastructure Technology accessible data as well as unauthorized read access to a subset of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62566","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62564","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62558","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Infrastructure Technology accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 6.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62555","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Infrastructure Technology accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62553","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62523","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62520","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Infrastructure Technology accessible data as well as unauthorized read access to a subset of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62510","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62509","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62506","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62499","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Infrastructure Technology, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Infrastructure Technology accessible data as well as unauthorized read access to a subset of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62475","description":"Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Shipping Execution. Successful attacks of this vulnerability can result in takeover of Oracle Shipping Execution. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62460","description":"Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager. While the vulnerability is in Oracle Hyperion Calculation Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 5.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62446","description":"Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62441","description":"Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Calculation Manager accessible data as well as unauthorized read access to a subset of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61342","description":"Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61313","description":"Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager. While the vulnerability is in Oracle Hyperion Calculation Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Calculation Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 6.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61308","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-61298","description":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install). Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Enterprise Manager Base Platform executes to compromise Oracle Enterprise Manager Base Platform. While the vulnerability is in Oracle Enterprise Manager Base Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 5.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61198","description":"Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Learning Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Learning Management accessible data as well as unauthorized read access to a subset of Oracle Learning Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61139","description":"Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public Sector Financials (International). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Public Sector Financials (International) accessible data as well as unauthorized read access to a subset of Oracle Public Sector Financials (International) accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Public Sector Financials (International). CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60895","description":"Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Unified Directory accessible data as well as unauthorized access to critical data or complete access to all Oracle Unified Directory accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60884","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60866","description":"Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Service Delivery Platform. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Service Delivery Platform accessible data as well as unauthorized read access to a subset of Service Delivery Platform accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60865","description":"Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Service Delivery Platform. While the vulnerability is in Service Delivery Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Service Delivery Platform accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60830","description":"Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Workflow accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60682","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Repository). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Reporting accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-59949","description":"yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in XXHashFactory.nativeInstance().hash32().hash(), XXHashFactory.nativeInstance().hash64().hash(), XXHashFactory.nativeInstance().newStreamingHash32().update(), and XXHashFactory.nativeInstance().newStreamingHash64().update(), allowing null arrays or oversized ranges to reach native code, read outside the Java array, and fatally terminate the JVM. This issue is fixed in version 1.11.1.","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-19608","description":"A flaw was found in the group policy provider of Keycloak authorization services, which is used to manage fine-grained access control to resources. The issue occurs when the system evaluates group-based policies using tokens that only contain group names rather than full paths. If two groups in different parts of the organization share the same name, a user in the unauthorized group can be mistaken for a member of the authorized group. This can allow a user to gain unauthorized access to protected resources they should not be able to reach.","exploit_maturity":"No public exploit","published":"2026-08-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-59903","description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.http.cors.CorsHandler setVaryHeader replaces application Vary headers such as Authorization or Cookie with Origin, allowing a caching proxy or CDN to reuse authenticated responses across users and disclose sensitive information. This issue is fixed in versions 4.1.137.Final and 4.2.17.Final.","exploit_maturity":"No public exploit","published":"2026-08-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-73632","description":"Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the JSON interceptor is affected, which is not enabled by default; applications using the json result type are not affected.\n\nThis issue affects Apache Struts: 7.2.1.\n\nUsers are recommended to upgrade to version 7.3.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-08-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-73631","description":"Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured parsing limits not to be enforced as intended. Populating actions from a JSON request body is not enabled by default; applications that do not use the JSON plugin are not affected.\n\nThis issue affects Apache Struts: 7.2.1.\n\nUsers are recommended to upgrade to version 7.3.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-08-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-19880","description":"Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an \nMDC-based discriminator value flows unsanitized into a nested \nFileAppender path, letting an attacker who influences that MDC value \n(e.g. via an HTTP header)\n create and append log files outside the intended directory. \n\n\nThis issue affects Logback-classic: from 0.9.14 through 1.6.2.","exploit_maturity":"No public exploit","published":"2026-08-14","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-19879","description":"A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The `writeString()` method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific Unicode characters in user-controlled input that an application places into response headers. This can lead to the truncation of these characters into ASCII control characters or special symbols, potentially resulting in limited integrity impact or information disclosure if the application does not properly sanitize user input.","exploit_maturity":"No public exploit","published":"2026-08-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-73508","description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.dns.AbstractDnsRecord, io.netty.handler.codec.dns.DefaultDnsRecordDecoder.decodeRecord(), and io.netty.handler.codec.dns.DnsCodecUtil.decompressDomainName() failed to release retained or newly allocated ByteBuf objects when IDN.toASCII() or encodeDomainName() rejected a malformed domain name, allowing unauthenticated remote DNS packets to leak direct memory incrementally until denial of service. This issue is fixed in versions 4.1.136.Final and 4.2.16.Final.","exploit_maturity":"No public exploit","published":"2026-08-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-19182","description":"An incorrect authorization check in the v2 Alarm REST API in OpenNMS Meridian and Horizon allows a low-privileged authenticated user (ROLE_REST) to acknowledge, escalate, or clear alarms recorded as an arbitrary username, and, when also assigned ROLE_READONLY, to modify alarm state despite the read-only restriction. A credential check that should restrict these operations is guarded by an inverted condition, so it never executes for a real (non-blank) username. This can potentially allow an attacker to compromise the integrity of alarm state and audit records.\n\n\n\nThe solution is to upgrade to Meridian 2024.3.12, 2025.0.9 and Horizon 36.0.3 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.","exploit_maturity":"No public exploit","published":"2026-08-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-19135","description":"A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an attacker to gain access to confidential information and compromise integrity.\n\nThe solution is to upgrade to Meridian 2024.3.12, 2025.0.9 and Horizon 36.0.3 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.","exploit_maturity":"No public exploit","published":"2026-08-13","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-10571","description":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. A low-privileged, administrative user could exploit this vulnerability to consume system resources when the restConnector-2.0 feature is enabled.","exploit_maturity":"No public exploit","published":"2026-08-13","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-24330","description":"A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the malicious archive. This could lead to further exploitation, such as arbitrary file read vulnerabilities.","exploit_maturity":"No public exploit","published":"2026-08-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-24329","description":"A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the Management Model. This injection causes the server to crash and become unrecoverable, as the payload is written into the standalone.xml configuration file. Manual intervention is required to restore server operation, leading to a denial of service.","exploit_maturity":"No public exploit","published":"2026-08-11","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-14180","description":"A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the parser uses a single internal variable to store both the remaining chunk size and state flags. By sending a specially crafted request with an extremely large chunk size, an attacker can cause these values to overlap, tricking the parser into thinking a request has finished prematurely. This can allow a second, \"smuggled\" request to be processed out of sync, potentially bypassing security controls.","exploit_maturity":"No public exploit","published":"2026-08-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-56818","description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained partial aggregate state when the maxNestedArrayDepth limit is exceeded, but it does not clear the same state when the sibling maxElements limit is exceeded. A peer can start a valid RESP array, send a bulk string child, then send a nested array header longer than the configured maxElements. Netty throws a decoder exception in decodeRedisArrayHeader, but the existing partial aggregate remains retained in the handler. If the application leaves the channel alive after the exception, later messages are still consumed into the pre-error aggregate, allowing an unauthenticated peer to keep attacker-controlled aggregate state alive across a security-limit exception and pin retained pooled buffers. This issue is fixed in versions 4.1.136.Final and 4.2.16.Final.","exploit_maturity":"Proof of concept only","published":"2026-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-48047","description":"XWiki Platform WebJars API is a package for XWiki, a generic wiki platform. Starting with version 9.6-rc-1 and prior to versions 16.10.17, 17.4.9, and 17.10.3, a potential path traversal vulnerability allow an attacker who manages to get a malicious WebJar extension installed on the wiki to write arbitrary files. While the consequences could be severe like overriding configuration files and setting the superadmin password, the attack first requires that the attacker already has admin access to at least a subwiki to be able to install a malicious extension. Further, the attacker needs to publish a malicious extension in an extension repository that is configured in the instance. This vulnerability has been patched in XWiki 16.10.17, 17.4.9, 17.10.3, and 18.0.0RC1. XWiki is not aware of any workarounds except for being careful whom developers grant script and admin rights to.","exploit_maturity":"Proof of concept only","published":"2026-08-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-71497","description":"jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup's HTML parser could incorrectly handle a malformed tag name ending in a control character, causing the tag to acquire the parsing behavior of a different element. When a custom Safelist permits certain raw-text elements, this misparsing can cause content that should remain inert text to be emitted as active markup after serialization, potentially resulting in cross-site scripting. jsoup's built-in Safelists are not affected. This issue is fixed in version 1.23.1.","exploit_maturity":"No public exploit","published":"2026-08-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-64640","description":"Apache Polaris did not consistently validate storage locations supplied during table and view registration.\n\nAn authenticated principal with permission to register a table or view could, depending on the affected release and registration path, cause Polaris to use the catalog's storage credentials to read a caller-selected Iceberg metadata file before verifying that the file was within the catalog's allowed storage locations.\n\nIf the catalog's underlying credentials could read an object outside that boundary, this could disclose limited information from the object.\n\n\nPolaris could also accept registration metadata located within an allowed location that contained references to storage locations outside the allowed boundary.\n\nThis second condition did not itself cause Polaris to read the referenced external locations during registration.\n\n\nThe demonstrated impact is limited to confidentiality.\n\nNo unauthorized data modification or availability impact has been demonstrated.\n\n\nThe server-side read requires a deployment using S3 credential vending and an object outside the allowed locations that the catalog's underlying storage credentials can read.\n\nExploitation requires an authenticated principal with table- or view-registration privileges.","exploit_maturity":"No public exploit","published":"2026-08-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-0637","description":"When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging occurs without sufficient validation or sanitization of the property values.\n\nA malicious actor with access to the 'wso2carbon' log files could retrieve sensitive information, such as user credentials or other confidential data, that was inadvertently logged due to misconfiguration, potentially leading to unauthorized access.","exploit_maturity":"No public exploit","published":"2026-08-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-13909","description":"The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable information.\n\nSuccessful exploitation allows an attacker to disclose personally identifiable information of users in different tenants, resulting in privacy violations and potential regulatory non-compliance. This may include unauthorized access to user details such as mobile numbers.","exploit_maturity":"No public exploit","published":"2026-08-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-13394","description":"The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery (CSRF) attacks. Specifically, it utilizes the HTTP GET method for these operations, and while the SameSite=Lax cookie attribute is employed for mitigation, this mechanism is bypassed as it permits cookies to be sent with cross-origin top-level navigation requests, including GET requests. This allows an attacker to trick an authenticated user's browser into unknowingly executing unintended actions.\n\nAn attacker can exploit this vulnerability to perform unauthorized state-altering requests on behalf of authenticated users. This could lead to consequences such as data modification, account changes, or other actions that could result in data compromise or loss of user control over their account. However, this attack is only feasible if the Carbon console and related services are exposed to the public internet, which is not recommended according to WSO2's security guidelines.","exploit_maturity":"No public exploit","published":"2026-08-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-8995","description":"Unused authorization codes issued to deleted users are not being properly invalidated or removed from the system. This allows for the persistence of these codes, enabling them to be potentially reused.\n\nIf an attacker possesses both the authorization code and the associated client credentials (client ID and client secret), they can leverage these unused codes to obtain access tokens on behalf of users who have already been deleted. This may lead to unauthorized access to sensitive resources and services, contingent on the scopes originally authorized for the compromised authorization code.","exploit_maturity":"No public exploit","published":"2026-08-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-6541","description":"The Class Mediator fails to correctly validate or sanitize `messageContext` properties when they are used to populate dynamic values. This allows authenticated users to potentially access or modify data across different system invocations that should be isolated.\n\nThis weakness can lead to the disclosure of sensitive information belonging to other users or the unintended modification of system data by authenticated users. The exact impact depends on how `messageContext` properties are utilized within the affected WSO2 products.","exploit_maturity":"No public exploit","published":"2026-08-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-10302","description":"The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allows arbitrary unvalidated data to be included within user claims, which are then used by downstream processes.\n\nAllowing unvalidated input into user claims can lead to various security risks. Malicious or malformed data injected during signup could be processed by other parts of the application, potentially enabling attacks such as content manipulation, redirection, user interface inconsistencies, unauthorized actions, and data exposure. The actual impact depends on how the compromised data is consumed and the privileges associated with the affected users.","exploit_maturity":"No public exploit","published":"2026-08-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70447","description":"Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70446","description":"Missing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70445","description":"Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70444","description":"A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70443","description":"Jenkins Horreum Plugin 0.16.162.v33b_4a_a_b_5f828 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to have Jenkins send credentials they are not entitled to use to the administrator-configured Horreum URL.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70442","description":"Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to use.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70441","description":"Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Create or Item/Configure permission.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70440","description":"Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a JavaScript context, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70439","description":"Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers lacking appropriate permissions to invoke the conversion functionality.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70438","description":"A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70436","description":"Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check (1.4.0 and earlier) or performs an improper permission check (1.4.1) when providing access to externally-managed workspaces through the workspace browser, allowing attackers with Overall/Read permission to read files in workspaces they are not authorized to access.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70435","description":"A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70434","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70433","description":"Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-70428","description":"Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting path traversal in file parameter names, allowing attackers with Item/Configure and Item/Build permission to write files to arbitrary locations on the controller file system.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-70427","description":"Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empty names during the extraction of `.tar` and `.tar.gz` archives, allowing attackers able to control agent processes to provide crafted archives to the controller to write files to arbitrary locations on the file system, restricted only by file system access permissions of the user running Jenkins.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-68080","description":"It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-68078","description":"It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-68077","description":"An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-68075","description":"An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-67591","description":"An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-66277","description":"It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-66276","description":"An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-66275","description":"An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-16100","description":"A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from failed account operations as Prometheus metric labels. Because these error messages can include user-supplied input like nonexistent client IDs, an authenticated user can create a massive number of unique metric entries, eventually exhausting system memory and causing the service to crash or become unavailable.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-16071","description":"A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external directories. The issue occurs when a delegated administrator performs a search using a specific LDAP entry Distinguished Name (DN). Due to missing validation, the system allows lookups for users located outside the configured search boundary, leading to the disclosure of account information from unauthorized parts of the directory and unintended importing of those users into local storage.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-14587","description":"Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a selected protocol version followed by 32 continuation bytes in the capability mask, the decoder resets the reader index and waits for more bytes instead of rejecting the protocol message and closing the channel.\n\n\n\nBecause the same unread bytes remain at the front of the decoder buffer, appending a terminating byte later does not recover the connection. The decoder re-reads the same first 32 continuation bytes, returns without producing a handshake-finalization message, and leaves the channel open.\n\n\n\nThis can be triggered before authentication by any client that can reach the Bolt connector.","exploit_maturity":"No public exploit","published":"2026-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-18401","description":"The non-blocking (asynchronous) JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints (default: 1000 characters). An attacker able to submit JSON to an application that uses the async parser API can supply a number token of arbitrary length, leading to excessive memory allocation and potential CPU exhaustion, resulting in a denial of service.\n\n\n\nThe synchronous parser enforces this limit correctly, so the constraint is applied inconsistently depending on which parsing API the application uses.\n\n\n\nRoot cause: the async parsing path in NonBlockingUtf8JsonParserBase and related classes never invokes the number length validation methods. Number parsing methods such as _finishNumberIntegralPart() accumulate digits into the TextBuffer without any length check, then call _valueComplete() to finalize the token. _valueComplete() does not call resetInt() or resetFloat(), which are the methods in ParserBase where validateIntegerLength() and validateFPLength() are performed. Because that validation step is skipped, maxNumberLength is never enforced on the async code path.\n\n\n\nImpact: an attacker sending a JSON document containing an arbitrarily long number to an application using the async parser (for example a Spring WebFlux or other reactive application) can cause unbounded allocation in the TextBuffer and an OutOfMemoryError. If the application subsequently calls getBigIntegerValue() or getDecimalValue(), the JVM may additionally be tied up in O(n^2) BigInteger parsing, causing CPU-based denial of service.\n\n\n\nNo privileges or user interaction beyond the ability to submit data for parsing are required.\n\n\n\nThis issue affects com.fasterxml.jackson.core:jackson-core from version 2.15.0 through 2.18.5 and from 2.19.0 through 2.21.0, and tools.jackson.core:jackson-core from 3.0.0 through 3.0.x.\n\n\n\nVersions prior to 2.15.0 are not affected, because StreamReadConstraints -- which defines the maxNumberLength setting -- was first introduced in jackson-core 2.15.0, so no such constraint exists to be bypassed in earlier releases. Note that GHSA-72hv-8253-57qq records the lower bound of the affected 2.x range as 2.0.0.","exploit_maturity":"Proof of concept only","published":"2026-08-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-17614","description":"A path traversal flaw was found in WildFly's domain mode\n implementation. The LocalFileRepository.getFile() and\n getConfigurationFile() methods in\n wildfly-core/deployment-repository do not validate that the\n resolved file path remains within the configured repository or\n configuration root directories. A remote attacker who has\n obtained the slave host controller secret or compromised a slave\n host controller can supply a crafted relative path containing\n directory traversal sequences (e.g., ../../etc/passwd) via the\n slave-DC wire protocol, causing the Domain Controller to resolve\n and serve arbitrary files readable by the DC process. This leads\n to unauthorized disclosure of sensitive information such as\n configuration files, keystores, and system credentials.","exploit_maturity":"No public exploit","published":"2026-08-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-68979","description":"Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization checking on components referencing Parameter values. Updating a Parameter Context can change parameter values that affect referencing components, but framework authorization was limited to read and write privileges on the Parameter Context itself. As a result of the missing authorization, an authenticated user authorized to modify a Parameter Context, but not authorized on referencing components, could alter Parameter values affecting those components. In deployments where a Parameter value contains executable scripting content, updating a Parameter can result in code execution during automatic component validation, without starting the referencing component. The impact was limited to stopped components by existing verification checks, and the issue applies only to deployments that use component-level authorization policies. Upgrading to Apache NiFi 2.11.0 is the recommended mitigation, which aligns the Parameter Context update method authorization with other methods, adding authorization checking on affected components.","exploit_maturity":"No public exploit","published":"2026-08-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-59652","description":"In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.","exploit_maturity":"No public exploit","published":"2026-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-59648","description":"In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).","exploit_maturity":"No public exploit","published":"2026-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-59647","description":"In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).","exploit_maturity":"No public exploit","published":"2026-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-58063","description":"In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).","exploit_maturity":"No public exploit","published":"2026-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-15055","description":"In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).","exploit_maturity":"No public exploit","published":"2026-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-13586","description":"In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).","exploit_maturity":"No public exploit","published":"2026-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-18573","description":"A flaw was found in the keycloak-services component of Keycloak, which is used for managing authentication and authorization flows. The issue occurs when a realm administrator configures client policies to enforce specific authentication requirements on confidential clients. Due to improper evaluation of the client state during an update operation, an attacker with client management permissions can bypass these security policies by first creating a public client and then updating it to a confidential client with weaker authentication. This can result in the persistence of clients that do not comply with the intended security hardening of the realm.","exploit_maturity":"No public exploit","published":"2026-08-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-18572","description":"Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing access during business hours). A flaw was discovered where a user can include a fake time value in their authorization request that overrides the actual server time. This allows the user to bypass these time-based restrictions and access protected resources at unauthorized times.","exploit_maturity":"No public exploit","published":"2026-08-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-18570","description":"A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component. This component is responsible for enforcing security policies during client registration and configuration in Red Hat Build of Keycloak. The issue occurs because the executor only validates the fullScopeAllowed field when it is explicitly provided in a request. By omitting this field, a delegated user can bypass the policy, resulting in a client created with full scope access. This allows the client to obtain tokens with unauthorized role mappings.","exploit_maturity":"No public exploit","published":"2026-08-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-64607","description":"HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header value in the response message. Please note this defect does not affect HttpClient based on the async i/o model.\n\nThis issue affects Apache HttpComponents Client: from 5.0-alpha1 through 5.6.2.","exploit_maturity":"No public exploit","published":"2026-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-53573","description":"GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This issue is fixed in versions 4.2.16 and 4.4.11.","exploit_maturity":"No public exploit","published":"2026-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-18218","description":"A flaw was found in the TokenManager component of the Keycloak identity management service. When an administrator attempts to revoke tokens for a specific application (client) using a \"not-before\" policy, the revocation may be silently ignored if the overall security realm already has an older, non-zero revocation policy in place. This issue can allow previously issued tokens to remain valid for refreshing sessions and accessing user information even after an administrator has attempted to invalidate them.\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━","exploit_maturity":"No public exploit","published":"2026-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-18217","description":"A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs when Keycloak handles SAML authentication requests using the HTTP-Redirect binding. If a client is configured with a wildcard redirect URL, an attacker can craft a request that includes malicious parameters. When a user authenticates, Keycloak appends its legitimate response to the attacker's parameters. This can cause some service providers to process the attacker's data instead of the real login information, potentially leading to a user being logged into the wrong account.","exploit_maturity":"No public exploit","published":"2026-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-18211","description":"A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client configurations, such as requiring encrypted connections for redirect URIs. Due to an improper check that only looks at the start of a web address rather than properly verifying the host, an attacker can bypass these security restrictions by using a specially crafted domain name. This could allow an attacker to intercept sensitive authentication codes over unencrypted connections.","exploit_maturity":"No public exploit","published":"2026-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-18209","description":"A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flows. The issue occurs because the security check designed to prevent HTTP parameter pollution only inspects the query portion of a redirect URL and ignores the fragment portion. When a client is configured with a wildcard redirect URI, an attacker can use this to inject duplicate security parameters into the login response. If a client application is not configured correctly, it might trust the attacker's injected data instead of the real security information from Keycloak, leading to session fixation or account confusion.","exploit_maturity":"No public exploit","published":"2026-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-18208","description":"A flaw was found in the OIDC token introspection endpoint of the keycloak-services component. Keycloak is an open-source identity and access management solution used to secure modern applications and services. The issue occurs when a confidential client, configured to receive signed JWT introspection responses, attempts to introspect a token issued for a different audience. Although the endpoint correctly identifies the token as inactive for that client, it still returns the full set of token claims within a signed JWT field. This allows an unauthorized client to bypass audience-based restrictions and access sensitive information contained in the token.","exploit_maturity":"No public exploit","published":"2026-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-18203","description":"A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution. When a group policy is set to extend permissions to child groups, the system incorrectly uses a simple text-based prefix check to verify group membership. This allows a user who belongs to a different group with a similar starting name to bypass security checks and gain unauthorized access to administrative functions or protected resources.","exploit_maturity":"No public exploit","published":"2026-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-16105","description":"A flaw was found in the RoleContainerResource component of Keycloak. The issue occurs because certain name-based endpoints in the admin REST API do not properly enforce authorization checks when managing composite roles. This allows a delegated administrator with manage-realm permissions to remove essential child roles from built-in admin roles, potentially disrupting administrative functions within a realm.","exploit_maturity":"No public exploit","published":"2026-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-66756","description":"Improper Protection of Alternate Path vulnerability in Apache Tika.\n\nThis issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1.\n\nUsers are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-07-30","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-66755","description":"Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their contents emitted into the extracted text output, via a \"Study Assay File Name\" value in the ISA-Tab investigation file that traverses outside the dataset directory. Users are recommended to upgrade to version 3.3.2 or 4.0.0-beta-1, which fixes this issue.","exploit_maturity":"No public exploit","published":"2026-07-30","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-11383","description":"IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console.","exploit_maturity":"No public exploit","published":"2026-07-30","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-59920","description":"Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's STOMP encoder ( StompSubframeEncoder ) does not escape or validate header values in  CONNECT  and  CONNECTED  frames, so raw newline ( \\n ) characters in a header value are written directly to the wire, allowing an attacker who controls a header value to inject additional STOMP headers. This happens because the encoder intentionally skips escaping for CONNECT/CONNECTED frames per the STOMP 1.2 specification but never rejects the raw newlines, and since a broker parses each line as a separate header, an attacker controlling a value such as a user-supplied login or passcode can overwrite connection parameters or add authentication/role headers to bypass authentication or escalate privileges (the actual impact is broker-dependent). The issue is fixed in versions 4.1.136.Final and 4.2.16.Final.","exploit_maturity":"Proof of concept only","published":"2026-07-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-59919","description":"Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder ( HAProxyMessageEncoder ) writes AF_UNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF characters, so an attacker who controls an AF_UNIX address can inject  \\r\\n  sequences and split the single PROXY header into multiple lines. This is possible because the V1 protocol uses CRLF as its line terminator and, unlike IPv4/IPv6 addresses whose format checks implicitly reject CRLF, AF_UNIX addresses are only validated for length (up to 108 bytes), allowing a forged second PROXY header line that spoofs the client source/destination IP to a downstream server or load balancer. The issue is fixed in versions 4.1.136.Final and 4.2.16.Final.","exploit_maturity":"Proof of concept only","published":"2026-07-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-59900","description":"Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, Netty's HTTP/2-to-HTTP/1.x translation layer (`Http2StreamFrameToHttpObjectCodec` and `InboundHttp2ToHttpAdapter`) fails to deduplicate or validate `Host` headers when an HTTP/2 client supplies both the `:authority` pseudo-header and a literal `host` header in a single HEADERS frame. The translator maps `:authority` to `Host` and separately copies the literal `host` header, producing an `HttpRequest` object containing two `Host` headers with attacker-controlled differing values. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.","exploit_maturity":"No public exploit","published":"2026-07-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-59899","description":"Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, `HttpContentEncoder` (the superclass of the production handler `HttpContentCompressor`) maintains a per-channel `ArrayDeque\u003cCharSequence\u003e` named `acceptEncodingQueue` that accumulates attacker-controlled data without any size limit. The queue is filled on the I/O thread for every inbound HTTP request and drained only when the application later writes a non-1xx response. This creates a resource exhaustion vulnerability when an attacker exploits HTTP/1.1 pipelining to flood the connection with requests faster than the application produces responses. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.","exploit_maturity":"No public exploit","published":"2026-07-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-59898","description":"Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attacker can force WebSocket upgrade via the lax V07 (or V08) handshaker by sending `Sec-WebSocket-Version: 7` and omitting `Connection: Upgrade` / `Upgrade: websocket` headers, completing a protocol switch that a proxy would not recognize as an Upgrade request and enabling HTTP request smuggling / protocol-confusion attacks. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.","exploit_maturity":"No public exploit","published":"2026-07-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-54082","description":"veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity vulnerability in PDFAValidator.validate(...) and GFPDAcroForm.getdynamicRender(), where default DocumentBuilderFactory parsing of rich-text annotation or form-field values and XFA configurations in untrusted PDFs can allow local file disclosure and outbound network requests. This issue is fixed in versions 1.30.2 and 1.31.71.","exploit_maturity":"No public exploit","published":"2026-07-29","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-54081","description":"veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parser contains a denial-of-service vulnerability in veraPDF-parser/src/main/java/org/verapdf/pd/font/type1/Type1FontProgram.java and veraPDF-parser/src/main/java/org/verapdf/parser/postscript/PSOperator.java, where a crafted Type 1 font /FontDescriptor /FontFile program can execute unbounded PostScript array allocation, a zero-increment for loop, or self-recursive toExecute user dictionary lookups and exhaust validator memory, CPU, or stack. This issue is fixed in versions 1.30.2 and 1.31.23.","exploit_maturity":"No public exploit","published":"2026-07-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-54080","description":"veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parser contains a denial-of-service vulnerability in veraPDF-parser/src/main/java/org/verapdf/pd/font/cmap/CMapParser.java and veraPDF-parser/src/main/java/org/verapdf/parser/postscript/PSOperator.java, where a crafted Type 0 font /Encoding or /ToUnicode CMap stream can execute unbounded PostScript array allocation or a zero-increment for loop and exhaust validator memory or CPU. This issue is fixed in versions 1.30.2 and 1.31.23.","exploit_maturity":"No public exploit","published":"2026-07-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-18207","description":"A flaw was found in the client policy enforcement mechanism of Keycloak. The issue occurs when the system checks group membership by name instead of a unique identifier. An attacker with client management privileges could bypass security policies by joining a group with a matching name in a different part of the group hierarchy, potentially allowing them to register or update clients without following required security hardening profiles.","exploit_maturity":"No public exploit","published":"2026-07-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-18201","description":"Keycloak provides a way to manage identity providers and organizations through its administrative API. A flaw was discovered where an administrator with permission to manage identity providers could link a new provider to an organization without having the required permissions to manage that organization. This could allow an unauthorized administrator to influence how users log into specific organizations.","exploit_maturity":"No public exploit","published":"2026-07-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-61487","description":"Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.\n\n An authenticated low-privilege user can bypass a per-destination\nwrite ACL by sending to an ActiveMQ temporary composite destination whose physical name is a\ncomma-separated composite of real queues. This allows publishing messages to any of the destinations in the list without proper write ACL permissions because the authorization check is bypassed due to the composite destination being marked as temporary.\nThis issue affects Apache ActiveMQ Broker: before 5.19.9, from 6.0.0 before 6.2.8; Apache ActiveMQ All: before 5.19.9, from 6.0.0 before 6.2.8; Apache ActiveMQ: before 5.19.9, from 6.0.0 before 6.2.8.\n\nUsers are recommended to upgrade to version 5.19.9, 6.2.8 or 6.3.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-07-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-59921","description":"Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without validating or sanitizing CRLF characters (\\r\\n). Since MIME headers are delimited by CRLF, an attacker who controls the filename can inject arbitrary MIME headers into the multipart body part. The root cause is that neither the encoder nor the FileUpload implementations' setFilename() methods, which only check for null, neutralize CRLF characters before the filename is embedded into the header. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.","exploit_maturity":"Proof of concept only","published":"2026-07-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-14515","description":"IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to conduct a cross-site scripting attack.","exploit_maturity":"No public exploit","published":"2026-07-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-66391","description":"Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket.\n\nThis issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0.\n\nUsers are recommended to upgrade to version 10.10.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-07-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-66390","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Wicket.\n\nThis issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0.\n\nUsers are recommended to upgrade to version 10.10.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-07-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-45112","description":"Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings.\n\nThis issue affects Apache Thrift: from 0.19.0 before 0.24.0.\n\nUsers are recommended to upgrade to version 0.24.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-07-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-63317","description":"Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP\n\nVersions Affected: \n\n- before 2.5.10\n- before 3.0.0-M5\n\nDescription: \n\nThree code paths in Apache OpenNLP load a class by its fully-qualified name via Class.forName() and invoke its no-arg constructor without any prior validation of the class name or its type. \n\nThe affected paths are: \n\n(1) GeneratorFactory, which reads the class attribute of generator elements in an XML feature generator descriptor; such descriptors are embedded as artifacts in model archives (e.g. TokenNameFinder and POSTagger models) and are parsed during model loading, so an attacker who can supply a crafted model archive controls the class name directly. \n\n(2) StreamFactoryRegistry.getFactory(Class, String), which falls back to interpreting an unregistered format name as the fully-qualified class name of an ObjectStreamFactory; this is exploitable in applications that pass untrusted format names (e.g. exposing the -format parameter of the command-line tooling to external input). \n\n(3) StringInterners, which instantiates the interner implementation named by the opennlp.interner.class system property; this value is normally deployer-controlled, so it is hardened as defense in depth rather than being independently attacker-reachable.\n\nExploitation requires a class with attacker-useful side effects in its static initializer or no-arg constructor (JNDI lookup, outbound network I/O, filesystem access) to be present on the classpath, so this is not drop-in remote code execution. T\n\nMitigation: \n\nUpgrade to a fixed release. \n\nThe fix routes all three paths through ExtensionLoader.instantiateExtension(...), which consults a package-prefix allowlist before Class.forName() is invoked, so a disallowed class is never loaded, initialized, or constructed. \nClasses under the opennlp. prefix remain permitted by default. Deployments that load models referencing feature generator factories, object stream factories, or string interners outside opennlp.* must opt those packages in, either programmatically via ExtensionLoader.registerAllowedPackage(String) before the first model load, or by setting the OPENNLP_EXT_ALLOWED_PACKAGES system property to a comma-separated list of allowed package prefixes. \n\nUsers who cannot upgrade immediately should ensure all model files and format names are sourced from trusted origins and should audit their classpath for classes with side-effecting static initializers or constructors.","exploit_maturity":"No public exploit","published":"2026-07-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-49326","description":"Missing Authorization vulnerability in Apache HBase thrift and rest delegation service.\n\nA scan operation in thrift/rest service has 3 steps, open, fetch(possible multiple times), close.\nThe open step will return an id which will be passed back to server for identifying the scanner instances stored at server side.\nWe missed the owner check in fetch and close steps which means a user can fetch rows from the scanner which is opened by other users, and close scanners which belongs to other users.\n\nThis issue affects Apache HBase:from 3.0.0-alpha-1 through 3.0.0-beta-1, from 2.6.0 through 2.6.5, from 2.5.0 through 2.5.14, through 2.4.*.\n\nUsers are recommended to upgrade to version 3.0.0-beta-2, 2.6.6 and 2.5.15, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-07-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-17059","description":"A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution. The issue occurs because the system fails to check if an administrator has permission to view individual users when listing members of a role. This allows a restricted administrator to see private information, such as names and email addresses, for users they should not be able to access.","exploit_maturity":"No public exploit","published":"2026-07-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-17048","description":"A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and clients. The issue occurs when the system processes requests for rotated client secrets that are stored in a secure vault. Due to improper boundary enforcement, a delegated administrator with view-only permissions can retrieve the actual resolved secret instead of the vault placeholder, leading to the exposure of sensitive credentials.","exploit_maturity":"No public exploit","published":"2026-07-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-62563","description":"Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Work in Process. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Work in Process, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Work in Process accessible data as well as unauthorized read access to a subset of Oracle Work in Process accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62562","description":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (US). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle HRMS (US) accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62559","description":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS (US). While the vulnerability is in Oracle HRMS (US), attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle HRMS (US) accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62556","description":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.6-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (US). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle HRMS (US) accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62542","description":"Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self Service Benefits). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Advanced Benefits accessible data as well as unauthorized read access to a subset of Oracle Advanced Benefits accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Advanced Benefits. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62528","description":"Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HCM Configuration Workbench. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HCM Configuration Workbench accessible data as well as unauthorized read access to a subset of Oracle HCM Configuration Workbench accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle HCM Configuration Workbench. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62527","description":"Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Import And Export). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Learning Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Learning Management accessible data as well as unauthorized read access to a subset of Oracle Learning Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Learning Management. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62525","description":"Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Quality Workbench HTML system). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Quality accessible data as well as unauthorized read access to a subset of Oracle Quality accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Quality. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62524","description":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (US). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HRMS (US) accessible data as well as unauthorized read access to a subset of Oracle HRMS (US) accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle HRMS (US). CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62519","description":"Vulnerability in the Oracle Succession planning product of Oracle E-Business Suite (component: Succession plan). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Succession planning. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Succession planning accessible data as well as unauthorized read access to a subset of Oracle Succession planning accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Succession planning. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62517","description":"Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Production Scheduling. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Production Scheduling accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62507","description":"Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Time and Labor. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Time and Labor accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62505","description":"Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Time and Labor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Time and Labor, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Time and Labor accessible data as well as unauthorized read access to a subset of Oracle Time and Labor accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62503","description":"Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Time and Labor. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Time and Labor accessible data as well as unauthorized access to critical data or complete access to all Oracle Time and Labor accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Time and Labor. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62490","description":"Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts Integration. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Contracts Integration accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62489","description":"Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts Integration. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Contracts Integration accessible data as well as unauthorized read access to a subset of Oracle Contracts Integration accessible data. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62488","description":"Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts Integration. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Contracts Integration accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62487","description":"Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Contracts Integration. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Contracts Integration, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Contracts Integration accessible data as well as unauthorized read access to a subset of Oracle Contracts Integration accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62486","description":"Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Contracts Integration. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Contracts Integration accessible data as well as unauthorized read access to a subset of Oracle Contracts Integration accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Contracts Integration. CVSS 3.1 Base Score 5.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62484","description":"Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Contracts Integration. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Contracts Integration accessible data. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62483","description":"Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Contracts. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Project Contracts accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62482","description":"Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public Sector Financials. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Public Sector Financials accessible data as well as unauthorized read access to a subset of Oracle Public Sector Financials accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62480","description":"Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public Sector Financials. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Public Sector Financials accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62479","description":"Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public Sector Financials. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Public Sector Financials, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Public Sector Financials accessible data as well as unauthorized read access to a subset of Oracle Public Sector Financials accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62474","description":"Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Lease Authoring). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Lease and Finance Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Lease and Finance Management accessible data as well as unauthorized read access to a subset of Oracle Lease and Finance Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Lease and Finance Management. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62470","description":"Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Manager Self-Service). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Self-Service Human Resources. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Self-Service Human Resources accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62465","description":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS (US) executes to compromise Oracle HRMS (US). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle HRMS (US) as well as unauthorized update, insert or delete access to some of Oracle HRMS (US) accessible data and unauthorized read access to a subset of Oracle HRMS (US) accessible data. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62453","description":"Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (UK). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HRMS (UK) accessible data as well as unauthorized read access to a subset of Oracle HRMS (UK) accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle HRMS (UK). CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62444","description":"Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Contracts Integration. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Contracts Integration, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Contracts Integration accessible data as well as unauthorized read access to a subset of Oracle Contracts Integration accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61328","description":"Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cost Management. Successful attacks of this vulnerability can result in takeover of Oracle Cost Management. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61323","description":"Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations). The supported version that is affected is 12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Benefits accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61316","description":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle EDI Gateway. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle EDI Gateway accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61315","description":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle EDI Gateway. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle EDI Gateway accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61304","description":"Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Price Protection. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Price Protection accessible data as well as unauthorized read access to a subset of Oracle Price Protection accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Price Protection. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61294","description":"Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Calendar Synchronizations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Common Applications Calendar. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Common Applications Calendar accessible data as well as unauthorized read access to a subset of Oracle Common Applications Calendar accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Common Applications Calendar. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61292","description":"Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle U.S. Federal Financials. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle U.S. Federal Financials accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61283","description":"Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Web Services). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Bills of Material accessible data as well as unauthorized read access to a subset of Oracle Bills of Material accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Bills of Material. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61282","description":"Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self Service Benefits). Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Advanced Benefits accessible data as well as unauthorized read access to a subset of Oracle Advanced Benefits accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Advanced Benefits. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61280","description":"Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Outlook Sync Win 32). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales for Handhelds. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Sales for Handhelds accessible data as well as unauthorized read access to a subset of Oracle Sales for Handhelds accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Sales for Handhelds. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61279","description":"Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Proposals). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Proposals. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Proposals accessible data as well as unauthorized read access to a subset of Oracle Proposals accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Proposals. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61278","description":"Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Workflow accessible data as well as unauthorized read access to a subset of Oracle Workflow accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Workflow. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61277","description":"Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Marketing accessible data as well as unauthorized read access to a subset of Oracle Marketing accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Marketing. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61275","description":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Role Based Security). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Product Hub accessible data as well as unauthorized read access to a subset of Oracle Product Hub accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Product Hub. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61274","description":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Product Hub accessible data as well as unauthorized read access to a subset of Oracle Product Hub accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Product Hub. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61269","description":"Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Workbench. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Product Workbench accessible data as well as unauthorized read access to a subset of Oracle Product Workbench accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Product Workbench. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61266","description":"Vulnerability in the Oracle Supply Chain Globalization product of Oracle E-Business Suite (component: Copy Inventory Organization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Supply Chain Globalization. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Supply Chain Globalization accessible data as well as unauthorized read access to a subset of Oracle Supply Chain Globalization accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Supply Chain Globalization. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61264","description":"Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: RDBMS and UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call Center Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Call Center Technology accessible data as well as unauthorized read access to a subset of Oracle Call Center Technology accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61263","description":"Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Scripting Admin). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Scripting accessible data as well as unauthorized read access to a subset of Oracle Scripting accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61262","description":"Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Diagnostics Scripts). Supported versions that are affected are 12.2.3-12.215. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Teleservice. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Teleservice accessible data as well as unauthorized read access to a subset of Oracle Teleservice accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61261","description":"Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data as well as unauthorized read access to a subset of Oracle Knowledge Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61260","description":"Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (UK). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HRMS (UK) accessible data as well as unauthorized read access to a subset of Oracle HRMS (UK) accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61257","description":"Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Call Back). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iSupport accessible data as well as unauthorized read access to a subset of Oracle iSupport accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61256","description":"Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Servers). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Inbound Telephony. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Advanced Inbound Telephony accessible data as well as unauthorized read access to a subset of Oracle Advanced Inbound Telephony accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Advanced Inbound Telephony. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61255","description":"Vulnerability in the Oracle HRMS (New Zealand) product of Oracle E-Business Suite (component: New Zealand Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (New Zealand). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HRMS (New Zealand) accessible data as well as unauthorized read access to a subset of Oracle HRMS (New Zealand) accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61254","description":"Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HRMS (Republic of Korea). Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HRMS (Republic of Korea) accessible data as well as unauthorized read access to a subset of Oracle HRMS (Republic of Korea) accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61253","description":"Vulnerability in the Oracle HRMS (Japanese) product of Oracle E-Business Suite (component: Oracle Payroll Japanese). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle HRMS (Japanese). Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HRMS (Japanese) accessible data as well as unauthorized read access to a subset of Oracle HRMS (Japanese) accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61252","description":"Vulnerability in the Oracle HRMS (Hong Kong) product of Oracle E-Business Suite (component: Hong Kong Payroll). Supported versions that are affected are 12.2.13-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (Hong Kong). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HRMS (Hong Kong) accessible data as well as unauthorized read access to a subset of Oracle HRMS (Hong Kong) accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61251","description":"Vulnerability in the HRMS (Australia) product of Oracle E-Business Suite (component: Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise HRMS (Australia). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all HRMS (Australia) accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61250","description":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Payroll accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61249","description":"Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Import And Export). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Learning Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Learning Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61247","description":"Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Workflow accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Workflow. CVSS 3.1 Base Score 4.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61221","description":"Vulnerability in the Oracle Item Master product of Oracle E-Business Suite (component: iSet-up bugs). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Item Master. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Item Master accessible data as well as unauthorized read access to a subset of Oracle Item Master accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61220","description":"Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications (component: Configuration). The supported version that is affected is 14.5.0.16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Origination. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Banking Origination, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Origination accessible data as well as unauthorized read access to a subset of Oracle Banking Origination accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61217","description":"Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: Oracle SSL API). The supported version that is affected is 12.2.1.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via TLS to compromise Oracle Security Service. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Security Service accessible data as well as unauthorized access to critical data or complete access to all Oracle Security Service accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61216","description":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Payroll accessible data as well as unauthorized read access to a subset of Oracle Payroll accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Payroll. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61200","description":"Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor Distribution. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Labor Distribution accessible data as well as unauthorized read access to a subset of Oracle Labor Distribution accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61195","description":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Core). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61194","description":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Core). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61192","description":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61191","description":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Document Management). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile Engineering Data Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 4.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61190","description":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile Engineering Data Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61189","description":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. While the vulnerability is in Oracle Agile Engineering Data Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61182","description":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Data Import). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile Product Lifecycle Management for Process executes to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks of this vulnerability can result in takeover of Oracle Agile Product Lifecycle Management for Process. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61176","description":"Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Product Lifecycle Analytics. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Product Lifecycle Analytics accessible data as well as unauthorized access to critical data or complete access to all Oracle Product Lifecycle Analytics accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Product Lifecycle Analytics. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61169","description":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agile PLM. While the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61152","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61147","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 6.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61143","description":"Vulnerability in the Oracle Communications Convergent Charging Controller product of Oracle Communications (component: Prov IF). Supported versions that are affected are 15.0.0.0.0 and 15.2.0.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Convergent Charging Controller. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Communications Convergent Charging Controller. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61134","description":"Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Commerce Platform accessible data as well as unauthorized access to critical data or complete access to all Oracle Commerce Platform accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61123","description":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (US). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle HRMS (US) accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle HRMS (US). CVSS 3.1 Base Score 4.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61117","description":"Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.8-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (UK). While the vulnerability is in Oracle HRMS (UK), attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle HRMS (UK) accessible data. CVSS 3.1 Base Score 6.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61112","description":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Order Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61111","description":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application Object Library executes to compromise Oracle Application Object Library. While the vulnerability is in Oracle Application Object Library, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Object Library accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61103","description":"Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the PeopleSoft Enterprise CS Campus Community executes to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Campus Community accessible data as well as unauthorized update, insert or delete access to some of PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61084","description":"Vulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle GoldenGate executes to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GoldenGate accessible data as well as unauthorized read access to a subset of Oracle GoldenGate accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61083","description":"Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite (component: Appraisals). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Performance Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Performance Management accessible data as well as unauthorized read access to a subset of Oracle Performance Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61080","description":"Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public Sector Human Resources. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Public Sector Human Resources accessible data as well as unauthorized read access to a subset of Oracle Public Sector Human Resources accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61079","description":"Vulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle GoldenGate executes to compromise Oracle GoldenGate. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle GoldenGate accessible data as well as unauthorized update, insert or delete access to some of Oracle GoldenGate accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle GoldenGate. CVSS 3.1 Base Score 5.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61075","description":"Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Self-Service Human Resources. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Self-Service Human Resources accessible data as well as unauthorized read access to a subset of Oracle Self-Service Human Resources accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61070","description":"Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Cash Management). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Common Objects Argentina. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise FIN Common Objects Argentina. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61069","description":"Vulnerability in the PeopleSoft Enterprise FIN General Ledger Argentina product of Oracle PeopleSoft (component: General Ledger). The supported version that is affected is 9.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN General Ledger Argentina. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise FIN General Ledger Argentina accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise FIN General Ledger Argentina. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61064","description":"Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Install / Upgrade Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iRecruitment. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iRecruitment accessible data as well as unauthorized read access to a subset of Oracle iRecruitment accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61060","description":"Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (component: Search Integration Engine). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business Suite Secure Enterprise Search. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle E-Business Suite Secure Enterprise Search accessible data as well as unauthorized read access to a subset of Oracle E-Business Suite Secure Enterprise Search accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61057","description":"Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft (component: eSettlements). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN eSettlements. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN eSettlements accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise FIN eSettlements accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61056","description":"Vulnerability in the PeopleSoft Enterprise FIN Grants product of Oracle PeopleSoft (component: Grants). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Grants. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN Grants accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise FIN Grants accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61051","description":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Concurrent Processing accessible data as well as unauthorized read access to a subset of Oracle Concurrent Processing accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Concurrent Processing. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61050","description":"Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Production Scheduling. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Production Scheduling accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61046","description":"Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Production Scheduling. While the vulnerability is in Oracle Production Scheduling, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Production Scheduling accessible data as well as unauthorized read access to a subset of Oracle Production Scheduling accessible data. CVSS 3.1 Base Score 6.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61044","description":"Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Production Scheduling. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Production Scheduling accessible data as well as unauthorized read access to a subset of Oracle Production Scheduling accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Production Scheduling. CVSS 3.1 Base Score 4.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61043","description":"Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Production Scheduling executes to compromise Oracle Production Scheduling. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Production Scheduling, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Production Scheduling accessible data as well as unauthorized read access to a subset of Oracle Production Scheduling accessible data. CVSS 3.1 Base Score 6.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61023","description":"Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Inventory Management executes to compromise Oracle Inventory Management. Successful attacks of this vulnerability can result in takeover of Oracle Inventory Management. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-61013","description":"Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Time and Labor. While the vulnerability is in Oracle Time and Labor, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Time and Labor accessible data as well as unauthorized update, insert or delete access to some of Oracle Time and Labor accessible data. CVSS 3.1 Base Score 6.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60978","description":"Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Scripting accessible data as well as unauthorized access to critical data or complete access to all Oracle Scripting accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60962","description":"Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Flow Manufacturing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Flow Manufacturing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Flow Manufacturing accessible data as well as unauthorized read access to a subset of Oracle Flow Manufacturing accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60957","description":"Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Execution. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Transportation Execution, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Transportation Execution accessible data as well as unauthorized read access to a subset of Oracle Transportation Execution accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60940","description":"Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Service Contracts. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Service Contracts accessible data as well as unauthorized access to critical data or complete access to all Oracle Service Contracts accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60938","description":"Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Labor Distribution executes to compromise Oracle Labor Distribution. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Labor Distribution accessible data. CVSS 3.1 Base Score 4.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60912","description":"Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Property Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Property Manager accessible data as well as unauthorized read access to a subset of Oracle Property Manager accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60911","description":"Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Property Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Property Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Property Manager accessible data as well as unauthorized read access to a subset of Oracle Property Manager accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60907","description":"Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.4-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data as well as unauthorized read access to a subset of Oracle Installed Base accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Installed Base. CVSS 3.1 Base Score 5.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60899","description":"Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Rapid Implementation). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HCM Configuration Workbench. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle HCM Configuration Workbench accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60893","description":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Payroll executes to compromise Oracle Payroll. While the vulnerability is in Oracle Payroll, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Payroll accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60892","description":"Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Norway Payroll). Supported versions that are affected are 12.2.8-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS (Norway). Successful attacks of this vulnerability can result in takeover of Oracle HRMS (Norway). CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60888","description":"Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Work in Process. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Work in Process accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60864","description":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. While the vulnerability is in Oracle Order Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Order Management accessible data as well as unauthorized read access to a subset of Oracle Order Management accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60862","description":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Order Management. While the vulnerability is in Oracle Order Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Order Management accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60846","description":"Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Mobile Application Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Mobile Application Server accessible data as well as unauthorized update, insert or delete access to some of Oracle Mobile Application Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Mobile Application Server. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60843","description":"Vulnerability in the Oracle Citizen Interaction Center product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Citizen Interaction Center. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Citizen Interaction Center accessible data as well as unauthorized access to critical data or complete access to all Oracle Citizen Interaction Center accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60842","description":"Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Search). Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data as well as unauthorized read access to a subset of Oracle Knowledge Management accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60835","description":"Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Price Protection. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Price Protection accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60832","description":"Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via RMI to compromise Oracle Interaction Blending. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Interaction Blending accessible data as well as unauthorized read access to a subset of Oracle Interaction Blending accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Interaction Blending. CVSS 3.1 Base Score 4.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60826","description":"Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks of this vulnerability can result in takeover of Oracle iSupport. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60825","description":"Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks of this vulnerability can result in takeover of Oracle iSupport. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60816","description":"Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60815","description":"Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iStore accessible data as well as unauthorized read access to a subset of Oracle iStore accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60812","description":"Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Supply Chain Trading Connector. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Supply Chain Trading Connector accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60811","description":"Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Supply Chain Trading Connector. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Supply Chain Trading Connector accessible data as well as unauthorized read access to a subset of Oracle Supply Chain Trading Connector accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Supply Chain Trading Connector. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60805","description":"Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cost Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Cost Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Cost Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Cost Management. CVSS 3.1 Base Score 6.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60802","description":"Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business Intelligence. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle E-Business Intelligence, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle E-Business Intelligence accessible data as well as unauthorized read access to a subset of Oracle E-Business Intelligence accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60801","description":"Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle E-Business Intelligence. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle E-Business Intelligence accessible data as well as unauthorized access to critical data or complete access to all Oracle E-Business Intelligence accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60795","description":"Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSetup. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle iSetup accessible data as well as unauthorized access to critical data or complete access to all Oracle iSetup accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60794","description":"Vulnerability in the Oracle TeleSales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle TeleSales. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle TeleSales accessible data as well as unauthorized read access to a subset of Oracle TeleSales accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60777","description":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data as well as unauthorized read access to a subset of Oracle Application Object Library accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Application Object Library. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60776","description":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: AOL Generic Loader). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Application Object Library executes to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60775","description":"Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Pasta executes to compromise Pasta. Successful attacks of this vulnerability can result in takeover of Pasta. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60762","description":"Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite (component: Configuration). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Applications Technology Stack executes to compromise Oracle Applications Technology Stack. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications Technology Stack accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications Technology Stack accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60761","description":"Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Applications DBA executes to compromise Oracle Applications DBA. While the vulnerability is in Oracle Applications DBA, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Applications DBA accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60760","description":"Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Asset Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Asset Management accessible data as well as unauthorized read access to a subset of Oracle Enterprise Asset Management accessible data. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60744","description":"Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Cost Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Cost Management accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60724","description":"Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data as well as unauthorized read access to a subset of Oracle Customer Interaction History accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60717","description":"Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Common Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair and Overhaul. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair and Overhaul accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60713","description":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel CRM Cloud Applications accessible data as well as unauthorized read access to a subset of Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60712","description":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60709","description":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel CRM Cloud Applications accessible data as well as unauthorized read access to a subset of Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60701","description":"Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Universal Work Queue. Successful attacks of this vulnerability can result in takeover of Oracle Universal Work Queue. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60697","description":"Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Site Hierarchy Flows). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Site Hub. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Site Hub accessible data as well as unauthorized read access to a subset of Oracle Site Hub accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Site Hub. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60695","description":"Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Enterprise Asset Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Enterprise Asset Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Enterprise Asset Management accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60694","description":"Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Asset Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Enterprise Asset Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Asset Management accessible data as well as unauthorized read access to a subset of Oracle Enterprise Asset Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60688","description":"Vulnerability in the Oracle Scheduler product of Oracle E-Business Suite (component: Rules UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Scheduler. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Scheduler accessible data as well as unauthorized read access to a subset of Oracle Scheduler accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Scheduler. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60687","description":"Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle U.S. Federal Financials. While the vulnerability is in Oracle U.S. Federal Financials, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle U.S. Federal Financials accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60685","description":"Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iSupport, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iSupport accessible data as well as unauthorized read access to a subset of Oracle iSupport accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60684","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Upload Attachments). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data as well as unauthorized read access to a subset of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60673","description":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60669","description":"Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Mexico product of Oracle PeopleSoft (component: Global Payroll for Mexico). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Global Payroll Mexico. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise HCM Global Payroll Mexico accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise HCM Global Payroll Mexico. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60666","description":"Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via Oracle Net to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise HCM Human Resources accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60630","description":"Vulnerability in Oracle APEX (component: Installation). Supported versions that are affected are 24.1, 24.2 and 26.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle APEX executes to compromise Oracle APEX. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle APEX accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60626","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). The supported version that is affected is 9.2.26.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes to compromise JD Edwards EnterpriseOne Tools. While the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60620","description":"Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: Configuration Management). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Configurator. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of JD Edwards EnterpriseOne Configurator as well as unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Configurator accessible data and unauthorized read access to a subset of JD Edwards EnterpriseOne Configurator accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60617","description":"Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise CS Campus Community accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60616","description":"Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Campus Community accessible data as well as unauthorized update, insert or delete access to some of PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60613","description":"Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student Records. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise CS Student Records. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60612","description":"Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: Commonline Loans). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Financial Aid. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise CS Financial Aid accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Financial Aid accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60611","description":"Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60610","description":"Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60609","description":"Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Communication). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60608","description":"Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: Institutional Methodology Need Analysis). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise CS Financial Aid executes to compromise PeopleSoft Enterprise CS Financial Aid. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise CS Financial Aid accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise CS Financial Aid accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60607","description":"Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: FM Need Analysis Calculator). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise CS Financial Aid executes to compromise PeopleSoft Enterprise CS Financial Aid. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Financial Aid accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60601","description":"Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN Common Objects executes to compromise PeopleSoft Enterprise FIN Common Objects. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise FIN Common Objects accessible data. CVSS 3.1 Base Score 4.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60595","description":"Vulnerability in the PeopleSoft Enterprise FIN Pay/Bill Management product of Oracle PeopleSoft (component: Paybill Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN Pay/Bill Management executes to compromise PeopleSoft Enterprise FIN Pay/Bill Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Pay/Bill Management accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60588","description":"Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Work Definition Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Asset Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Asset Management accessible data as well as unauthorized read access to a subset of Oracle Enterprise Asset Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60587","description":"Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Project Definition). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Foundation. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Project Foundation accessible data as well as unauthorized read access to a subset of Oracle Project Foundation accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Project Foundation. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60575","description":"Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Workflow accessible data as well as unauthorized read access to a subset of Oracle Workflow accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Workflow. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60574","description":"Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Cover Letter). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Content Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Content Manager accessible data as well as unauthorized read access to a subset of Oracle Content Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Content Manager. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60573","description":"Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Partner Dashboard). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Partner Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data as well as unauthorized read access to a subset of Oracle Partner Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Partner Management. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60572","description":"Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Web Service Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business Suite Integrated SOA Gateway. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle E-Business Suite Integrated SOA Gateway accessible data as well as unauthorized read access to a subset of Oracle E-Business Suite Integrated SOA Gateway accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle E-Business Suite Integrated SOA Gateway. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60571","description":"Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Installation). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SDP Number Portability. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle SDP Number Portability accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle SDP Number Portability. CVSS 3.1 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60557","description":"Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60521","description":"Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Price List). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Pricing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Advanced Pricing accessible data as well as unauthorized read access to a subset of Oracle Advanced Pricing accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60501","description":"Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Service Delivery Platform executes to compromise Service Delivery Platform. While the vulnerability is in Service Delivery Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Service Delivery Platform accessible data as well as unauthorized read access to a subset of Service Delivery Platform accessible data. CVSS 3.1 Base Score 5.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60491","description":"Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: SDK client integration). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Inbound Telephony. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Advanced Inbound Telephony accessible data as well as unauthorized read access to a subset of Oracle Advanced Inbound Telephony accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Advanced Inbound Telephony. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60434","description":"Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication). The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Transportation Management accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60433","description":"Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Integration). The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Transportation Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Transportation Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60399","description":"Vulnerability in Oracle GoldenGate (component: Receiver Service Executable). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle GoldenGate. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60397","description":"Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle GoldenGate executes to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GoldenGate. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60395","description":"Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GoldenGate accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60394","description":"Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GoldenGate accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60351","description":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle JDeveloper accessible data as well as unauthorized read access to a subset of Oracle JDeveloper accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60350","description":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle JDeveloper executes to compromise Oracle JDeveloper. While the vulnerability is in Oracle JDeveloper, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle JDeveloper accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60349","description":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java Business Objects). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle JDeveloper. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle JDeveloper accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle JDeveloper. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60348","description":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle JDeveloper accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60344","description":"Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (France). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HRMS (France) accessible data as well as unauthorized read access to a subset of Oracle HRMS (France) accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60342","description":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Access Manager accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60337","description":"Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing executes to compromise Oracle Project Manufacturing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Project Manufacturing accessible data as well as unauthorized update, insert or delete access to some of Oracle Project Manufacturing accessible data. CVSS 3.1 Base Score 4.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60336","description":"Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing executes to compromise Oracle Project Manufacturing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Project Manufacturing accessible data as well as unauthorized access to critical data or complete access to all Oracle Project Manufacturing accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60322","description":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Manager accessible data as well as unauthorized read access to a subset of Oracle Applications Manager accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60321","description":"Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing executes to compromise Oracle Project Manufacturing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Project Manufacturing accessible data as well as unauthorized access to critical data or complete access to all Oracle Project Manufacturing accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60319","description":"Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Data Integrator executes to compromise Oracle Data Integrator. While the vulnerability is in Oracle Data Integrator, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Data Integrator accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60310","description":"Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite (component: Appraisals). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Performance Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Performance Management accessible data as well as unauthorized read access to a subset of Oracle Performance Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60307","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60304","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Coherence. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60303","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Coherence. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60283","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60282","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Coherence accessible data as well as unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60270","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Coherence accessible data as well as unauthorized update, insert or delete access to some of Oracle Coherence accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60266","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Coherence accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60265","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle Coherence. While the vulnerability is in Oracle Coherence, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Coherence accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60260","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60243","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Coherence. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60238","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. While the vulnerability is in Oracle Coherence, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Coherence accessible data as well as unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60237","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60233","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Coherence. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60231","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Coherence accessible data as well as unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60213","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Coherence as well as unauthorized update, insert or delete access to some of Oracle Coherence accessible data. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60172","description":"Vulnerability in Oracle Autonomous Health Framework (component: Developer triaging platform). Supported versions that are affected are 26.0.0, 26.1.0 and 26.2.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise Oracle Autonomous Health Framework. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Autonomous Health Framework. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60165","description":"Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Enterprise Command Center). The supported version that is affected is V16. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cost Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Cost Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Cost Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60156","description":"Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1, 24.2 and 26.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle APEX. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle APEX accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60154","description":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data as well as unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60152","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60149","description":"Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Workflow executes to compromise Oracle Workflow. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Workflow as well as unauthorized update, insert or delete access to some of Oracle Workflow accessible data and unauthorized read access to a subset of Oracle Workflow accessible data. CVSS 3.1 Base Score 5.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-60147","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-60146","description":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Access Manager accessible data as well as unauthorized read access to a subset of Oracle Access Manager accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-56746","description":"Netty is a network application framework for development of protocol servers and clients. Versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, are vulnerable to security control bypass during the origin evaluation process. CorsHandler provides a shortCircuit() configuration designed to reject unauthorized cross-origin requests immediately, acting as a security control before requests reach the application. However, due to a logical operator error in the origin evaluation process, this protection can be entirely bypassed. An attacker can bypass the short-circuit mechanism by sending a request with an Origin: null header. This failure forwards unauthorized requests to the backend application, bypassing intended access controls. This issue is fixed in versions 4.1.136.Final and 4.2.16.Final.","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-47051","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-47049","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-47048","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-47027","description":"Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-47024","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). The supported version that is affected is 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-47021","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-47009","description":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files \u0026 Attachments). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-47003","description":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-47002","description":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Enterprise Manager Base Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Manager Base Platform accessible data as well as unauthorized read access to a subset of Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-47001","description":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Web Services Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Manager Base Platform accessible data as well as unauthorized read access to a subset of Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46997","description":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46991","description":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Enterprise Manager Base Platform executes to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Manager Base Platform accessible data as well as unauthorized read access to a subset of Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46986","description":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46985","description":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46984","description":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46980","description":"Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile). Supported versions that are affected are 2.5.0.1.0-2.5.0.1.17, 2.5.0.2.0-2.5.0.2.11, 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.8 and 25.12.0.0.0-25.12.0.0.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Utilities Network Management System. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Utilities Network Management System accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46968","description":"Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-46948","description":"Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Security). Supported versions that are affected are 2.4.0.1.0-2.4.0.1.32, 2.5.0.1.0-2.5.0.1.17, 2.5.0.2.0-2.5.0.2.11, 2.6.0.2.0-2.6.0.2.7 and 25.12.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Utilities Network Management System. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Utilities Network Management System accessible data as well as unauthorized read access to a subset of Oracle Utilities Network Management System accessible data. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34316","description":"Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Service Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Service Center, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Service Center accessible data as well as unauthorized read access to a subset of Oracle Commerce Service Center accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21954","description":"Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (component: Xstore Mobile). The supported version that is affected is 21.0.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Xstore Point of Service. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Retail Xstore Point of Service accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-58624","description":"Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH.\n\n\n\n\nComponent org.apache.sshd:sshd-git provides though its GitPgmCommandFactory a way to configure an Apache MINA SSHD server such that SSH clients can remotely execute git commands via the JGit library on git repositories stored on the server.\n\n\n\n\nThis GitPgmCommandFactory allowed a user authenticated via SSH to run any JGit command available, including commands that could write files at arbitrary places such as git archive with the --output option.\n\n\n\n\nAffected are SSH servers implemented with Apache MINA SSHD and using the GitPgmCommandFactory. If the GitPgmCommandFactory is not configured on the server, the server is not affected.\n\n\n\n\nIt is recommended to upgrade affected servers to Apache MINA SSHD 2.19.0 or 3.0.0-M5, which fix this issue.\n\n\n\n\nThe issue is fixed by restricting the available commands to a small whitelist of uncritical commands (such as git log). git archive is also allowed, but its --output argument is ignored and the archive is always sent through the SSH channel to the client.","exploit_maturity":"No public exploit","published":"2026-07-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-62764","description":"Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo.\nAn authenticated, but low-privileged user without system permissions may\nissue a remote command to gracefully shutdown system components\n(compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver),\nleading to a denial of service.\n\nThis issue affects Apache Accumulo 2.1.4 and 2.1.5.\n\nUsers are recommended to upgrade to version 2.1.6, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-16108","description":"A flaw was found in the default-groups REST endpoint and realm representation of Keycloak. This component is responsible for managing groups that are automatically assigned to new users within a realm. The issue allows a delegated administrator with realm-viewing permissions to see the names and identifiers of hidden default groups, even if they lack the specific permissions to view those groups. This can lead to the exposure of sensitive organizational structures or internal group names.","exploit_maturity":"No public exploit","published":"2026-07-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-16106","description":"A flaw was found in the admin REST API of Keycloak, a solution for identity and access management. The issue occurs when a delegated administrator attempts to remove a child role from a composite role. Due to missing authorization checks, an attacker with limited administrative permissions can remove privileged roles they are not authorized to manage, leading to a loss of access for other users and administrators.","exploit_maturity":"No public exploit","published":"2026-07-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-16104","description":"A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys, when they are requested by administrators with view-only permissions. This can lead to the exposure of third-party service credentials to unauthorized personnel or through administrative logs.","exploit_maturity":"No public exploit","published":"2026-07-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-16103","description":"A flaw was found in the keycloak-services component of Keycloak. This issue is an incomplete fix for CVE-2026-9798, where brute-force protection checks were added to the Client-Initiated Backchannel Authentication (CIBA) initiation handler but were omitted from the token redemption handler. This allows an attacker with valid client credentials to obtain access and refresh tokens for a user account that has been locked due to brute-force protection, provided the authentication request was started before the lockout occurred and was approved by the user.","exploit_maturity":"No public exploit","published":"2026-07-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-16093","description":"Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them to use signed JWTs for authentication. A flaw was discovered where this enforcement can be bypassed. An attacker with valid client credentials can provide a fake, unsigned assertion header that tricks the system into thinking the policy requirements have been met. This allows the attacker to authenticate using simpler methods like a client secret even when the administrator has mandated more secure, signed assertions.","exploit_maturity":"No public exploit","published":"2026-07-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-16089","description":"A flaw was found in the keycloak-services component of Red Hat Build of Keycloak. The issue occurs because OAuth 2.0 authorization codes are not properly bound to the client that originally requested them. An attacker who can intercept an authorization code can modify it to be redeemed by their own client, potentially allowing them to obtain access tokens for a victim's identity.","exploit_maturity":"No public exploit","published":"2026-07-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-16072","description":"A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent email address and then retrieve the secret registration link directly through the application programming interface. By using this link, the administrator can create new user accounts and add them to the organization without having the required user management permissions or access to the invited email account. This allows an administrator to bypass security boundaries and add unauthorized members to an organization.","exploit_maturity":"No public exploit","published":"2026-07-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-15943","description":"A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The issue occurs when a delegated administrator updates an OIDC identity provider using a masked client secret sentinel value. Due to improper validation, Keycloak reuses the existing real secret even if security-sensitive fields like the token URL have been changed, allowing an attacker to redirect and capture the secret.","exploit_maturity":"No public exploit","published":"2026-07-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-55548","description":"Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, the PacketsApi.exportPackets endpoint in yamcs-core/src/main/java/org/yamcs/http/api/PacketsApi.java failed to enforce object-level ReadPacket privileges when a request omitted specific packet names: with an empty name list the ctx.checkObjectPrivileges(ObjectPrivilegeType.ReadPacket, nameSet) call passed over an empty set, no WHERE pname IN filter was applied to the resulting SELECT * FROM tm query, and the onTuple handler streamed every retrieved packet without any per-row authorization check, so a low-privileged or zero-privilege authenticated user could dump the entire raw telemetry packet archive and bypass the role-based access control model. This issue is fixed in versions 5.12.8 and 5.13.2, which enforce per-packet ReadPacket checks in exportPackets.","exploit_maturity":"Proof of concept only","published":"2026-07-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-44595","description":"Yamcs is a mission control framework. Prior to 5.12.7, the IAM API endpoints listUsers, getUser, listGroups, and getGroup in yamcs-core did not enforce the required SystemPrivilege.ControlAccess check in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java, so any authenticated user, even one with low or no privileges, could enumerate all user accounts in the system including their usernames, superuser status, and group memberships. This issue is fixed in versions 5.12.7 and 5.13.0.","exploit_maturity":"Working exploit published","published":"2026-07-16","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2026-15945","description":"A flaw was found in the group search functionality of the Keycloak server's administrative API. When Fine-Grained Admin Permissions (FGAP) v2 is enabled, a delegated administrator can bypass access restrictions to view parent groups they are not authorized to see. By searching for a child group they have permission to view, the system incorrectly returns the full details of the parent group in the response, leading to the disclosure of sensitive group attributes and configuration.","exploit_maturity":"No public exploit","published":"2026-07-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-26032","description":"The PackagerResolver of Apache Ivy is able to download online\nartifacts and to (re)package them in a format defined by a\npackager.xml file. This repackaging is done by an Ant script, which is\nstored in a subdirectory of the configured \"buildRoot\" directory. This\nsubdirectory is calculated based on modules coordinates, like the\norganisation, name or version.\n\nIf one of the coordinates contains \"../\" sequences - which are valid\ncharacters for Ivy coordinates in general- it is possible to break out\nof the configured \"buildRoot\" directory where other files can be\noverwritten.\n\nIn order to exploit this vulnerability an attacker needs to have\naccess to a packager repository and add or modify the coordinates in\nivy.xml files to have such \"../\" sequences.\n\nUsers of Apache Ivy 2.0.0 to 2.5.3 (inclusive) should upgrade to Ivy 2.6.0.","exploit_maturity":"No public exploit","published":"2026-07-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-32781","description":"Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.0, Apollo Portal does not verify application and namespace permissions when an authenticated user requests a release by ID through GET /envs/{env}/releases/{releaseId} while configView.memberOnly.envs is enabled, allowing a low-privileged Portal user who obtains or guesses a valid releaseId to read configuration data from other applications and namespaces without calling UserPermissionValidator.shouldHideConfigToCurrentUser(...). This issue is fixed in version 2.5.0.","exploit_maturity":"No public exploit","published":"2026-07-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-8384","description":"In Eclipse Jetty, an HTTP URI of this form:\n\n\n\n\n\n/public;/../admin/secret.txt\n\n\n\n\n\n\n\n\nresults in an unresolved path of:\n\n\n\n\n\n/public/../admin/secret.txt\n\n\n\n\n\n\n\n\ninstead of the expected:\n\n\n\n\n\n/admin/secret.txt\n\n\n\n\n\n\n\n\nJetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker (only resolved resources are served).\n\n\n\n\nHowever, web applications that rely on resolved paths being provided by Jetty may be confused when receiving an unresolved path.","exploit_maturity":"No public exploit","published":"2026-07-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-6790","description":"In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present).\n\n\n\n\nThis was not enforced in earlier HTTP RFC (for example, in RFC 2616), but it is in the latest RFC (9110 and 9112).\n\n\n\n\nThis mismatch can cause a number of problems that may be classified as vulnerabilities such as:\n\n\n\n * \n \n URI constructions (for example, for redirects -- this is typical for login pages)\n\n * \n \n Virtual host selection\n\n * \n \n Reverse proxying\n\n * \n \n Misleading logs\n\n * \n \n Etc.\n\n\n\n\n\n\nGiven that the latest RFCs require that request authority and Host header must match, Jetty should enforce this invariant.","exploit_maturity":"No public exploit","published":"2026-07-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-59889","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.18.0 until 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1, UnwrappedPropertyHandler.processUnwrapped() replays buffered JSON for a @JsonUnwrapped property and calls prop.deserializeAndSet() without a prop.visibleInView(ctxt.getActiveView()) guard, allowing a property annotated with both @JsonView and @JsonUnwrapped to be written from attacker JSON under a less-privileged active view. This issue is fixed in versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1.","exploit_maturity":"No public exploit","published":"2026-07-14","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-59888","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJOPropertiesCollector._removeUnwantedIgnorals() records an ignored component under its original implicit name before _renameUsing() applies the naming strategy, allowing the renamed JSON key to be assigned to the Record constructor parameter. This issue is fixed in versions 2.18.8, 2.21.4, and 3.1.4.","exploit_maturity":"No public exploit","published":"2026-07-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-10051","description":"In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection.\nSubsequent request that do not have trailers report the trailers of the first request.\nSubsequent request that do have trailers report the union of trailers of the first request and the current request.","exploit_maturity":"No public exploit","published":"2026-07-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-49876","description":"Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino.\n\nThis issue affects Apache Gravitino: from 1.0.0 through 1.2.1.\n\nUsers are recommended to upgrade to version 1.3.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-49844","description":"Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue affects Apache Log4j API versions 2.13.1 through 2.25.4 and version 2.26.0.\n\nThe fix for CVE-2026-34481 did not cover all code paths: when a MapMessage contains a non-finite IEEE 754 value (NaN, Infinity, or -Infinity), MapMessage.asJson() emits the corresponding bare token. RFC 8259 does not permit these tokens, so a conformant parser rejects the resulting document.\n\nThe defect is reachable only when both of the following conditions hold:\n\n * The application uses the message resolver https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message of JsonTemplateLayout or any other layout that relies on MapMessage.asJson() or MapMessage.getFormattedMessage(new String[]{\"JSON\"}).\n * The application logs a MapMessage that contains an attacker-controlled floating-point value.\n\n\nAn attacker who can supply a non-finite value can cause the affected layout to emit malformed JSON, which may corrupt the enclosing log record or disrupt downstream log ingestion and parsing.\n\nUsers are advised to upgrade to Apache Log4j API 2.25.5 or 2.26.1, both of which emit RFC 8259-compliant JSON for non-finite values.","exploit_maturity":"No public exploit","published":"2026-07-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-12799","description":"A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined configuration to allow unescaped characters in URL with embedded Undertow and Jastow, a server might be vulnerable to improper input handling.","exploit_maturity":"No public exploit","published":"2026-07-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-56139","description":"Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Undertow Component.\n\nThe camel-undertow HTTP server consumer exposes a muteException option that controls what is returned to the client when a route processing error occurs. This option defaulted to false, whereas the other Camel HTTP server components (camel-http / camel-jetty / camel-servlet and camel-platform-http) default it to true. With muteException=false, when a request triggers an exception during route processing the consumer writes the full Throwable stack trace into the HTTP response body as text/plain instead of returning an empty body. Any unauthenticated client that can reach the endpoint and cause a processing error - for example by sending a malformed request body, an invalid parameter, or otherwise triggering a route-internal failure - therefore receives a complete Java stack trace. Such a stack trace can disclose sensitive internal information, including credentials embedded in exception messages, internal host names and IP addresses, filesystem paths, dependency and version details, database and class names, and the application's internal structure, which an attacker can use to plan further attacks. In addition, for Rest DSL consumers the muteException option was not honoured at all: the RestUndertowHttpBinding was created with a hard-coded false, so the stack trace was returned even when muteException=true had been configured.\nThis issue affects Apache Camel: from 4.0.0 before 4.14.8, from 4.15.0 before 4.18.3, from 4.19.0 before 4.21.0.\n\nUsers are recommended to upgrade to version 4.21.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.8. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.3. For deployments that cannot upgrade immediately, set muteException=true explicitly on the camel-undertow consumer (for example undertow: http://0.0.0.0:8080/api?muteException=true , or globally via the camel.component.undertow.mute-exception=true property), so that processing errors no longer return the stack trace to the client; note that on affected releases this workaround does not cover Rest DSL consumers, whose binding ignores the option until the fix is applied.","exploit_maturity":"No public exploit","published":"2026-07-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-49365","description":"Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Netty HTTP component.\n\nThe camel-netty-http HTTP server consumer exposes a muteException option that controls what is returned to the client when a route processing error occurs. This option defaulted to false because the backing field was an uninitialised primitive boolean (Java's default of false), whereas the other Camel HTTP server components (camel-http / camel-jetty / camel-servlet and camel-platform-http) default it to true. With muteException=false, when a request triggers an exception during route processing the consumer writes the full Throwable stack trace into the HTTP response body as text/plain (via DefaultNettyHttpBinding) instead of returning an empty body. Any unauthenticated client that can reach the endpoint and cause a processing error - for example by sending a malformed request body, an invalid parameter, or otherwise triggering a route-internal failure - therefore receives a complete Java stack trace. Such a stack trace can disclose sensitive internal information, including credentials embedded in exception messages, internal host names and IP addresses, filesystem paths, dependency and version details, database and class names, and the application's internal structure, which an attacker can use to plan further attacks.\nThis issue affects Apache Camel: from 4.0.0 before 4.14.8, from 4.15.0 before 4.18.3, from 4.19.0 before 4.21.0.\n\nUsers are recommended to upgrade to version 4.21.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.8. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.3. For deployments that cannot upgrade immediately, set muteException=true explicitly on the camel-netty-http consumer (for example netty-http: http://0.0.0.0:8080/api?muteException=true , or globally via the camel.component.netty-http.configuration.mute-exception=true property), so that processing errors no longer return the stack trace to the client.","exploit_maturity":"No public exploit","published":"2026-07-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-49099","description":"Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel Salesforce Component.\n\nThe camel-salesforce producer resolves its operation parameters - the SOQL query, the SOSL search, the target SObject name and id, the Apex REST URL and method, and the Apex query parameters - from Exchange message headers, reading the header in preference to the value configured on the endpoint (AbstractSalesforceProcessor.getParameter() reads the header first and uses the endpoint configuration only as a fallback). The control-header constants in SalesforceEndpointConfig (for example SOBJECT_QUERY = sObjectQuery, SOBJECT_SEARCH = sObjectSearch, SOBJECT_NAME = sObjectName, SOBJECT_ID = sObjectId, APEX_URL = apexUrl, APEX_METHOD = apexMethod, and the apexQueryParam. prefix) used plain, non-Camel-prefixed values. Because these names do not start with the Camel / camel prefix, HttpHeaderFilterStrategy - which blocks only the Camel header namespace on the HTTP boundary - let them pass from an inbound HTTP request straight into the Exchange. In a route that bridges an HTTP consumer (for example platform-http) into a salesforce: producer, any HTTP client could therefore set these headers and override what the route intended - supplying its own SOQL query or SOSL search to read data from any SObject the connected Salesforce user can access, overriding the target SObject name and id for CRUD operations, or redirecting an Apex REST call to a different endpoint and HTTP method (including destructive methods) with injected query parameters. All such operations run with the full permissions of the Salesforce connected (integration) user, which is typically broad. No credentials are required from the attacker when the bridging consumer is unauthenticated.\nThis issue affects Apache Camel: from 4.0.0 before 4.14.8, from 4.15.0 before 4.18.3, from 4.19.0 before 4.21.0.\n\nUsers are recommended to upgrade to version 4.21.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.8. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.3. After upgrading, routes that set Salesforce operation parameters via the raw header names must use the CamelSalesforce* names (for example CamelSalesforceSObjectQuery and CamelSalesforceApexUrl) instead of the old sObject* / apex* values; the endpoint-option spelling is unchanged. For deployments that cannot upgrade immediately, strip the Salesforce control headers from any untrusted ingress before the salesforce: producer (for example removeHeaders('sObject*') and removeHeaders('apex*') at the start of the route), and set the query, SObject and Apex parameters from a trusted source.","exploit_maturity":"No public exploit","published":"2026-07-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-49098","description":"Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Kafka Component.\n\nThe camel-kafka producer can override its configured target topic at runtime from the kafka.OVERRIDE_TOPIC Exchange header: KafkaProducer.evaluateTopic() returns the header value in preference to the topic configured on the endpoint. The control-header constants in KafkaConstants (for example OVERRIDE_TOPIC = kafka.OVERRIDE_TOPIC, OVERRIDE_TIMESTAMP = kafka.OVERRIDE_TIMESTAMP, PARTITION_KEY = kafka.PARTITION_KEY) used plain, non-Camel-prefixed values. camel-kafka's own KafkaHeaderFilterStrategy does filter the kafka.* namespace, but only on the Kafka-to-Exchange serialization boundary (reading Kafka record headers into the Exchange, and writing Exchange headers into a Kafka record); it does not apply to headers that arrive from an upstream consumer in a multi-component route. The upstream HTTP consumer uses HttpHeaderFilterStrategy, which blocks only the Camel / camel namespace, so a kafka.* header passes through unfiltered. As a result, in a route that bridges an HTTP consumer (for example platform-http) into a kafka: producer, any HTTP client could set the kafka.OVERRIDE_TOPIC header and cause the message to be published to an arbitrary Kafka topic instead of the configured one - redirecting it to a sensitive internal topic, or injecting attacker-crafted messages into a topic consumed by a critical downstream service. The related kafka.OVERRIDE_TIMESTAMP and kafka.PARTITION_KEY headers could likewise be injected to backdate messages or target specific partitions. No credentials are required when the bridging consumer is unauthenticated.\nThis issue affects Apache Camel: from 4.0.0 before 4.14.8, from 4.15.0 before 4.18.3, from 4.19.0 before 4.21.0.\n\nUsers are recommended to upgrade to version 4.21.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.8. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.3. After upgrading, routes that set or read Kafka headers via the raw header names must use the CamelKafka* names (for example CamelKafkaOverrideTopic and CamelKafkaTopic) instead of the old kafka.* values. For deployments that cannot upgrade immediately, strip the kafka.* headers from any untrusted ingress before the kafka: producer (for example removeHeaders('kafka.*') at the start of the route), and set the target topic from a trusted source.","exploit_maturity":"No public exploit","published":"2026-07-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-49097","description":"Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel IRC component.\n\nThe camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header (the constant IrcConstants.IRC_SEND_TO, value irc.sendTo); when that header is present it overrides the channel list configured on the endpoint, and the message is sent only to the specified destination. This and the component's other control headers (irc.target, irc.messageType, irc.user.*, irc.num, irc.value) used plain, non-Camel-prefixed values. Because these names do not start with the Camel / camel prefix, HttpHeaderFilterStrategy - which blocks only the Camel header namespace on the HTTP boundary - let them pass from an inbound HTTP request straight into the Exchange. In a route that bridges an HTTP consumer (for example platform-http) into an irc: producer, any HTTP client could therefore set the irc.sendTo header and redirect a message that the route intended for a configured channel to an arbitrary IRC channel or user - exfiltrating the message content to an attacker-chosen nickname, leaking it into a public channel, or delivering messages that appear to come from the bot. No credentials are required when the bridging consumer is unauthenticated.\nThis issue affects Apache Camel: from 4.0.0 before 4.14.8, from 4.15.0 before 4.18.3, from 4.19.0 before 4.21.0.\n\nUsers are recommended to upgrade to version 4.21.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.8. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.3. After upgrading, routes that set IRC headers via the raw header names must use the CamelIrc* names (for example CamelIrcSendTo) instead of the old irc.* values. For deployments that cannot upgrade immediately, strip the irc.* headers from any untrusted ingress before the irc: producer (for example removeHeaders('irc.*') at the start of the route), and set the IRC destination from a trusted source.","exploit_maturity":"No public exploit","published":"2026-07-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-49086","description":"Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerability in Apache Camel DAPR component.\n\nThe camel-dapr Dapr Pub/Sub consumer (DaprPubSubConsumer) copied two fields from each inbound CloudEvent - its Pub/Sub component name and its topic - into the CamelDaprPubSubName and CamelDaprTopic Exchange headers. These two headers are producer-direction routing headers: when the route republishes through a Dapr producer, DaprConfigurationOptionsProxy reads them back and prefers them over the destination configured on the endpoint. As a result, in a route that consumes from one Dapr Pub/Sub topic and republishes to another (for example from('dapr-pubsub:p:t').to('dapr-pubsub:p:other')), an actor able to publish a message to the subscribed topic could set the CloudEvent's pub/sub-name and topic to values of their choosing and cause the re-published message to be delivered to an arbitrary Dapr Pub/Sub component and topic instead of the configured destination - redirecting or exfiltrating the message and bypassing the route's intended routing and any topic-level access controls in the underlying broker. Exploitation requires the ability to publish to the topic the route subscribes to; no other authentication or user interaction is needed.\nThis issue affects Apache Camel: from 4.12.0 before 4.14.8, from 4.15.0 before 4.18.3, from 4.19.0 before 4.21.0.\n\nUsers are recommended to upgrade to version 4.21.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.8. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.3. For deployments that cannot upgrade immediately, remove the CamelDaprPubSubName and CamelDaprTopic headers from the Exchange between the Dapr consumer and any Dapr producer in the route (for example removeHeaders('CamelDaprPubSubName', 'CamelDaprTopic')), and restrict who can publish to the subscribed Dapr Pub/Sub topic so that only trusted producers can send to it.","exploit_maturity":"No public exploit","published":"2026-07-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-48206","description":"Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel JIRA component.\n\nThe camel-jira producers read their operation parameters - the issue key, project key, transition id, summary, type, assignee, components, watchers, link type, work-log minutes and others - from Exchange message headers. The header constants defined in JiraConstants (for example ISSUE_KEY = IssueKey, ISSUE_PROJECT_KEY = ProjectKey, ISSUE_TRANSITION_ID = IssueTransitionId, LINK_TYPE = linkType) used plain, non-Camel-prefixed values. Because these names do not start with the Camel / camel prefix, HttpHeaderFilterStrategy - which blocks only the Camel header namespace on the HTTP boundary - let them pass from an inbound HTTP request straight into the Exchange. In a route that bridges an HTTP consumer (for example platform-http) into a jira: producer, any HTTP client could therefore supply these headers and override the values the route intended, driving JIRA operations against the configured JIRA instance with the endpoint's configured service-account credentials - for example deleting or transitioning an arbitrary issue (via IssueKey / IssueTransitionId), creating an issue in a different project (via ProjectKey), modifying issue fields, adding or removing watchers, or logging work. The operations are bounded by what the configured service account is permitted to do. No credentials are required from the attacker when the bridging consumer is unauthenticated.\nThis issue affects Apache Camel: from 4.0.0 before 4.14.8, from 4.15.0 before 4.18.3, from 4.19.0 before 4.21.0.\n\nUsers are recommended to upgrade to version 4.21.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.8. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.3. After upgrading, routes that drive JIRA operations via the raw header names must use the CamelJira* names (for example CamelJiraIssueKey) instead of the old values. For deployments that cannot upgrade immediately, strip the camel-jira control headers from any untrusted ingress before the jira: producer (for example removing the IssueKey, ProjectKey, IssueTransitionId and related headers at the start of the route), and set the required JIRA operation parameters from a trusted source.","exploit_maturity":"No public exploit","published":"2026-07-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-46453","description":"Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel ElasticSearch Rest Client.\n\nThe camel-elasticsearch-rest-client component reads several Exchange headers to control its behaviour - SEARCH_QUERY (an advanced query body), OPERATION (which Elasticsearch operation to run), INDEX_NAME, INDEX_SETTINGS and ID. The string values of these header constants, defined in ElasticSearchRestClientConstant, are plain unprefixed names ('SEARCH_QUERY', 'OPERATION', 'INDEX_NAME', 'INDEX_SETTINGS', 'ID') rather than the 'Camel'-prefixed names used by every other Camel component (for example CamelSqlQuery, CamelMongoDbCriteria, CamelCqlQuery). Camel's inbound HTTP header filter, HttpHeaderFilterStrategy, blocks only header names that begin with 'Camel' or 'camel'. Because the Elasticsearch header names do not carry that prefix, they pass through the inbound filter unchanged. When a Camel route exposes an HTTP entry point (for example platform-http) in front of an elasticsearch-rest-client producer, an untrusted HTTP client can set these headers directly on its request and override the query and operation that the route author configured: reading every document in the index (SEARCH_QUERY with a match_all query), deleting documents (OPERATION set to Delete together with ID), or exfiltrating selected fields. No credentials are required and the producer reads the headers unconditionally.\nThis issue affects Apache Camel: from 4.3.0 before 4.14.8, from 4.15.0 before 4.18.3, from 4.19.0 before 4.21.0.\n\nUsers are recommended to upgrade to version 4.21.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.8. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.3. The fix renames the camel-elasticsearch-rest-client Exchange header constant string values (ID, SEARCH_QUERY, INDEX_SETTINGS, INDEX_NAME, OPERATION) to carry the Camel prefix (CamelElasticsearchId, CamelElasticsearchSearchQuery, CamelElasticsearchIndexSettings, CamelElasticsearchIndexName, CamelElasticsearchOperation) so that they are blocked by the inbound HttpHeaderFilterStrategy; the Java field names are unchanged. For deployments that cannot upgrade immediately, strip the affected headers from untrusted inbound messages before they reach the producer (for example removeHeader('SEARCH_QUERY'), removeHeader('OPERATION'), removeHeader('INDEX_NAME'), removeHeader('INDEX_SETTINGS') and removeHeader('ID') in front of the elasticsearch-rest-client endpoint), or apply a custom HeaderFilterStrategy that blocks these names.","exploit_maturity":"No public exploit","published":"2026-07-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-14781","description":"A flaw exists in the org.keycloak.broker.oidc package where the OIDC broker incorrectly synchronizes the email_verified claim. When an OIDC identity provider is configured with trustEmail=true and the userinfo endpoint is enabled, Keycloak retrieves the email address from the userinfo response but retrieves the email_verified status exclusively from the id_token.\nThe root cause is a lack of validation ensuring that the email_verified claim in the id_token actually refers to the email address returned by the userinfo endpoint. If these two sources return different email addresses, the id_token's email_verified=true claim is blindly applied to the userinfo email.\nExploitation Conditions:\nThe OIDC identity provider must have trustEmail set to true (non-default).\n\nThe userinfo endpoint must be enabled (default).\n\nThe attacker must control or have compromised the upstream OIDC provider.\n\n\nConcrete Impact:\nMark arbitrary email addresses as verified in the Keycloak database.\n\nBypass email-based security controls or verification workflows.\n\nPotential account takeover if the application relies solely on the email_verified flag from the IdP to link accounts.","exploit_maturity":"No public exploit","published":"2026-07-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-14615","description":"A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Keycloak's administrative services. When FGAP v2 is enabled, the system fails to properly filter child groups based on the caller's specific permissions when requested through a parent group. This allows a delegated administrator to view details of child groups they are not authorized to access directly, including group names, paths, and custom attributes.","exploit_maturity":"No public exploit","published":"2026-07-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-14614","description":"A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions (FGAP) v2 is enabled. This issue allows a delegated administrator, who should only have limited control over specific clients, to attach or remove hidden client scopes that they are not authorized to see or manage. As a result, an attacker could inject unauthorized data or permissions into the security tokens issued to end-users, potentially tricking other applications into granting higher levels of access than intended.","exploit_maturity":"No public exploit","published":"2026-07-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-14613","description":"A vulnerability was discovered in Keycloak's administrative interface that allows certain administrators to see information about groups they shouldn't have access to. When the new Fine-Grained Admin Permissions (FGAP v2) are turned on, an administrator who is allowed to see a specific \"role\" can also see a list of all groups assigned to that role. The system fails to check if the administrator has permission to see those specific groups. This could allow a restricted administrator to discover \"hidden\" groups and see their details, such as internal names and custom settings, which might contain sensitive deployment information.","exploit_maturity":"No public exploit","published":"2026-07-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-55688","description":"The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. In versions from 2.0.0 prior to 2.16.0 and from 3.0.0.Beta1 prior to 3.0.11, ThreadSafeCookieStore stored a cookie under the value of its Domain attribute without verifying that the responding host is allowed to set a cookie for that domain, leading to a cookie tossing / cookie injection issue. A host the client connects to can therefore plant a cookie scoped to an unrelated domain, and the client will then send that cookie on later requests to that domain. Applications that use a single AsyncHttpClient instance - and thus the default, shared CookieStore - to reach both an attacker-influenced host and a trusted host are impacted. This issue has been fixed in versions 2.16.0 and 3.0.11.","exploit_maturity":"No public exploit","published":"2026-07-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-54704","description":"OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.28.0, the JDBC auto-instrumentation may fail to sanitize passwords in SQL CONNECT statements when the password is double-quoted. As a result, clear-text database passwords can be added to trace span attributes and exported to observability backends. This issue has been fixed in version 2.28.0.","exploit_maturity":"No public exploit","published":"2026-07-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-55223","description":"c3p0 is a JDBC Connection pooling library. In versions prior to 0.14.0, c3p0 in combination with other libraries, can compose to a \"sink\" for deserialization gadgets. The JDBC spec's DataSource.getConnection() and ConnectionPoolDataSource.getPooledConnection() match the getXXX() form, so JavaBean libraries treat them as \"properties\" assumed safe while they actually call into JDBC drivers. Attackers can thus craft malicious DataSource objects whose property lookups invoke vulnerable drivers, then smuggle them in serialized form to where an application deserializes and auto-resolves bean properties — triggering the attack. This requires a susceptible DataSource/ConnectionPoolDataSource and JDBC driver on the CLASSPATH, plus a carrier that auto-looks-up JavaBean properties on = deserialization, most commonly a collection paired with an Apache commons-beanutils Comparator that sorts by bean properties. c3p0 supplied that susceptible DataSource/ConnectionPoolDataSource, which was an essential component of the trigger. This issue has been fixed in version 0.14.0.","exploit_maturity":"No public exploit","published":"2026-06-30","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-52760","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache ActiveMQ, Apache ActiveMQ Web Console.\n\nThe browse page in the web console renders a message Id directly without sanitization. This allows an authenticated producer to send a message with a JMS message ID that has been crafted to contain HTML/JavaScript such that when an administrator browses the queue in the Web Console, the payload executes in their browser.\nThis issue affects Apache ActiveMQ: before 5.19.8, from 6.0.0 before 6.2.7; Apache ActiveMQ Web Console: before 5.19.8, from 6.0.0 before 6.2.7.\n\nUsers are recommended to upgrade to version 6.2.7 or 5.19.8, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-06-30","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-4629","description":"A flaw was found in Keycloak. A highly privileged user with `manage-clients` permission can exploit this vulnerability by injecting a hardcoded role mapper into any client. This action allows the user to bypass existing scope restrictions and inject the `realm-admin` role into generated tokens, resulting in privilege escalation and full administrative access to the realm.","exploit_maturity":"No public exploit","published":"2026-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-14209","description":"A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions (FGAPv2) are enabled, an administrator who should only be able to search for users (but not view their full details) can use a specific \"brute-force-user\" endpoint to access a user's full profile. This includes sensitive information and security metadata. The issue occurs because the system fails to check if the administrator has the required \"view\" permission for that specific user when using this particular search path.","exploit_maturity":"No public exploit","published":"2026-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-12388","description":"A flaw was found in the Identity Provider (IdP) mapper component of Keycloak, which is used to manage how user information from external services is mapped to Keycloak users. An administrator with limited permissions to manage identity providers can exploit this flaw by creating a \"Hardcoded Role\" mapper that assigns high-level administrative roles (like realm-admin) to themselves or others. This allows a restricted administrator to bypass security checks and gain full control over the entire realm.","exploit_maturity":"No public exploit","published":"2026-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53648","description":"SQL misconfiguration in the Gravitino UI, in versions 1.0.0 and below, can allow a malicious user to read or truncate files.\nUsers are recommended to upgrade to version 1.0.0, which fixes this issue.","exploit_maturity":"No public exploit","published":"2026-06-30","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-55956","description":"Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for the default servlet ignoring any method or method omission configured as part of the constraint.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other versions that have reached end of support may also be affected.\n\nUsers are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fix the issue.","exploit_maturity":"No public exploit","published":"2026-06-29","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-55955","description":"Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.13 through 9.0.18, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109.\n\nUsers are recommended to upgrade to version 11.0.23, 10.1.56, 9.0.119, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-06-29","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-50229","description":"Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example for Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other versions that have reached end of support may also be affected.\n\nUsers are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fix the issue.","exploit_maturity":"Working exploit published","published":"2026-06-29","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2026-57914","description":"By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues. Users are recommended to upgrade to version 2.1.2, which fixes this issue.","exploit_maturity":"No public exploit","published":"2026-06-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-9799","description":"A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access (UMA) permission ticket for one resource can exploit this by using a specific permission request prefix to bypass per-resource access control. This allows the user to gain unauthorized access to all resources of that type within the same resource server, even if they do not have a ticket for those specific resources. This vulnerability requires the resource server to be configured in PERMISSIVE policy enforcement mode and affects typed resources with ownerManagedAccess enabled, where no explicit policy protects the resource type. The primary consequence is unauthorized information disclosure or modification of resources.","exploit_maturity":"No public exploit","published":"2026-06-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-9705","description":"A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registration Access Token (RAT), could exploit this vulnerability to re-enable a client that an administrator had explicitly disabled. This bypasses security controls, allowing the attacker to reset the client's secret and potentially regain privileged API access. The primary impact includes unauthorized information disclosure and potential integrity compromise.","exploit_maturity":"No public exploit","published":"2026-06-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-9083","description":"A flaw was found in Keycloak. A realm administrator with the \"manage-realm\" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore parameter when creating a key provider component. This allows the administrator to probe arbitrary filesystem paths, determining which files exist and are readable by the Keycloak process. This information disclosure could be used to identify high-value targets for follow-on attacks.","exploit_maturity":"No public exploit","published":"2026-06-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-57307","description":"A missing permission check in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57306","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57305","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified username and password.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57304","description":"A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username and password.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57300","description":"A missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows attackers with Item/Read permission to read the Pipeline replay scripts of jobs they can access.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57299","description":"Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers with Overall/Read permission to enumerate the names of configured Contrast metadata.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57298","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers to have Jenkins connect to an attacker-specified URL using an attacker-specified username, API key, and service key.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57297","description":"A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username, API key, and service key.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57295","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing AWS credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57294","description":"A missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing AWS credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57293","description":"An incorrect permission check in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57292","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57291","description":"Missing permission checks in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allow attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57290","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Priority Sorter Plugin 936.v2c01c6b_84449 and earlier allows attackers to overwrite the global job priority configuration.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57289","description":"Jenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections sending Bearer token authenticated requests to the configured Bitbucket Server endpoint, allowing attackers able to intercept network traffic to capture the token.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57287","description":"Jenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encrypted values of secrets when displaying historical job and agent configurations, allowing attackers with Extended Read permission to view encrypted secret values that would otherwise be redacted.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57286","description":"A missing permission check in Jenkins Git Parameter Plugin 462.vdcf3df2ed2ca_ and earlier allows attackers with Item/Read permission to obtain information about the SCM repository used by a job, such as branch names, tag names, and revision metadata.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57285","description":"A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57284","description":"Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, allowing attackers to instantiate types related to job or system configuration other than Pipeline steps.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57283","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier allows attackers to instantiate types related to job or system configuration other than Pipeline steps through the Pipeline Snippet Generator.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-57282","description":"Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into a generated SSH wrapper script, allowing attackers able to control the name of a build's working directory to execute arbitrary operating system commands on the agent.","exploit_maturity":"No public exploit","published":"2026-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-54518","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.21.0 until 2.21.4 and 3.1.4, UnwrappedPropertyHandler.processUnwrappedCreatorProperties() replays buffered JSON into creator parameters but never consults prop.visibleInView(activeView). The normal property-based creator path gates creator properties on the active view, but this unwrapped-creator replay path bypasses that check, so a constructor parameter annotated with both @JsonView(AdminView.class) and @JsonUnwrapped is populated from attacker JSON even when a more restrictive view is active. This vulnerability is fixed in 2.21.4 and 3.1.4.","exploit_maturity":"No public exploit","published":"2026-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-54517","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.21.0 until 2.21.4 and 3.1.4, in BeanDeserializer._deserializeUsingPropertyBased, the active-view (@JsonView) filter was applied only to creator properties; the regular property-buffering branch performed no prop.visibleInView(activeView) check. A change making SetterlessProperty.isMerging() return true routed setterless Collection/Map properties through this unguarded path, so a setterless collection annotated with a restricted @JsonView is populated from attacker JSON even when the active view excludes it. This vulnerability is fixed in 2.21.4 and 3.1.4.","exploit_maturity":"No public exploit","published":"2026-06-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-54516","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.21.0 until 2.21.4 and 3.1.4, POJOPropertiesCollector._renameProperties() allows a property with @JsonProperty(\"renamed\") on the getter and @JsonIgnore on the setter to be renamed rather than dropped. With MapperFeature.INFER_PROPERTY_MUTATORS enabled (default), the private backing field is retained; during deserialization BeanDeserializerFactory.addBeanProps() sees hasField()==true, builds a FieldProperty, and makes the backing field writable. An attacker supplying the renamed JSON key writes the backing field directly, bypassing the @JsonIgnore on the setter. This vulnerability is fixed in 3.1.4.","exploit_maturity":"No public exploit","published":"2026-06-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-54515","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are applied by _handleByNameInclusion(), producing a contextual deserializer whose BeanPropertyMap has the ignored properties removed. The subsequent per-property case-insensitivity block (triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES)) rebuilds from this._beanProperties (the original, unfiltered map) instead of contextual._beanProperties, then overwrites the filtered map — restoring every property _handleByNameInclusion had just removed. The ignored property becomes writable again. This vulnerability is fixed in 2.18.9, 2.21.5, and 3.1.4.","exploit_maturity":"No public exploit","published":"2026-06-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-54514","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.0.0 until 2.18.8, 2.21.4, and 3.1.4, JDKFromStringDeserializer constructed InetSocketAddress with new InetSocketAddress(host, port), which performs eager DNS name resolution for hostname inputs at deserialization time. An application that binds untrusted JSON into a type containing an InetSocketAddress field issues an attacker-chosen DNS query during readValue, before any application-level validation or connect logic. The fix uses InetSocketAddress.createUnresolved(host, port), deferring DNS to an explicit connect. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4.","exploit_maturity":"No public exploit","published":"2026-06-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-50193","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.13.0 until 2.14.0, a potential Denial-of-Service exists when attacker sends deeply nested JSON if (and only if) the service reads deeply nested (1000s of levels) JSON as JsonNode (ObjectMapper.readTree()) and writes out same (or modifided) node using JsonNode.toString(). This can consume significant amount of resources with concurrent relatively small requests (1000 nested arrays is 2kB). This vulnerability is fixed in 2.14.0.","exploit_maturity":"No public exploit","published":"2026-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-54665","description":"Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request headers that provide an alternative to the standard Host header without validating the values provided. Apache NiFi 1.6.0 introduced a configurable application property to restrict values provided in the HTTP Host header, but did not apply the validation to alternative Proxy and Forwarded headers. The absence of proxy host header validation allowed a client to instruct Apache NiFi web services to construct invalid qualified URLs for redirection or data references. Upgrading to Apache NiFi 2.10.0 is the recommended mitigation, which implements validation for the X-ProxyHost and X-Forwarded-Host HTTP request headers based on the nifi.web.proxy.host property. Enabling header validation requires configuring the application with HTTPS. Reverse proxy servers in front of Apache NiFi are responsible for filtering input request headers and providing allowed values to the application.","exploit_maturity":"No public exploit","published":"2026-06-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-44913","description":"Improper escaping of database table names in the CaptureChangeMySQL Processor included with Apache NiFi 1.2.0 through 2.9.0 allows for injecting SQL commands using crafted naming. Manual quoted boundaries added in Apache NiFi 1.8.0 narrowed the scope of potential injection options, but did not cover additional strategies. Apache NiFi installations that do not use the CaptureChangeMySQL Processor are not subject to this vulnerability. Upgrading to Apache NiFi 2.10.0 is the recommended mitigation, which incorporates more robust identifier escaping.","exploit_maturity":"No public exploit","published":"2026-06-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-11748","description":"A vulnerability has been identified in centraldogma-server-auth-shiro versions prior to 0.84.0, where the SearchFirstActiveDirectoryRealm substitutes the login username into an LDAP search filter without neutralizing LDAP filter metacharacters, allowing an unauthenticated attacker to manipulate the filter to cause authentication confusion and enumerate the directory structure.","exploit_maturity":"Proof of concept only","published":"2026-06-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62198","description":"An authenticated user can perform XSS.\n\nThis issue affects Apache Atlas versions 2.4.0 and earlier.\n\nUsers are recommended to upgrade to version 2.5.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-06-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-11752","description":"A vulnerability has been identified in armeria-xds versions 1.38.0 through 1.39.0, where DataSourceStream in the xDS module can resolve control-plane-supplied filenames and environment variables without restriction, allowing a compromised or semi-trusted xDS control plane to read arbitrary local files and environment variables on the xDS client host.","exploit_maturity":"No public exploit","published":"2026-06-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-47340","description":"Allow authenticated users to access alert instances associated with alert groups they do not have permission to access. in Apache DolphinScheduler.\n\nThis issue affects Apache DolphinScheduler: before 3.4.2.\n\nUsers are recommended to upgrade to version 3.4.2, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-06-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-46979","description":"Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Integration and Interfaces). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise CS Campus Community accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-06-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46812","description":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Access Manager accessible data as well as unauthorized read access to a subset of Oracle Access Manager accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-06-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46810","description":"Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: End User Self Service). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Identity Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Identity Manager accessible data as well as unauthorized read access to a subset of Identity Manager accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-06-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46790","description":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Content accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-06-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46772","description":"Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Application Development Framework (ADF) executes to compromise Oracle Application Development Framework (ADF). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Development Framework (ADF) accessible data as well as unauthorized update, insert or delete access to some of Oracle Application Development Framework (ADF) accessible data. CVSS 3.1 Base Score 4.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-06-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46771","description":"Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: Java Business Objects). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Application Development Framework (ADF) executes to compromise Oracle Application Development Framework (ADF). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Development Framework (ADF) accessible data. CVSS 3.1 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-06-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46770","description":"Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Development Framework (ADF). Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Development Framework (ADF), attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Development Framework (ADF) accessible data as well as unauthorized read access to a subset of Oracle Application Development Framework (ADF) accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-06-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-42357","description":"Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access.\n\nThis issue affects Apache DolphinScheduler versions prior to 3.4.2.\n\n\nUsers are recommended to upgrade to version 3.4.2, which fixes this issue.","exploit_maturity":"No public exploit","published":"2026-06-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41280","description":"Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects\n\nThis issue affects Apache DolphinScheduler versions prior to 3.4.2. \n\nUsers are recommended to upgrade to version 3.4.2, which fixes this issue.","exploit_maturity":"No public exploit","published":"2026-06-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-35291","description":"Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise WebLogic Server. Successful attacks of this vulnerability can result in takeover of WebLogic Server. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2026-06-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-35261","description":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Access Manager accessible data as well as unauthorized read access to a subset of Oracle Access Manager accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-06-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-8484","description":"A heap buffer overflow vulnerability exists in the Jansi JNI \"ioctl()\" wrapper due to a lack of size verification for the argument array before the system call. This can lead to heap corruption and application crashes (DoS).\nAll versions are believed to be vulnerable. This project is unmaintained at the time of CVE assignment.","exploit_maturity":"No public exploit","published":"2026-06-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-50634","description":"A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's assumption\n\nthat accepted `Content-Type` or protected HTTP-header metadata came from a verified signature entry, and may steer downstream JAX-RS entity parsing or signed-header consistency checks. Users are recommended to upgrade to versions 4.2.2 or 4.1.7 or 3.6.12, which fix this issue.","exploit_maturity":"No public exploit","published":"2026-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-50630","description":"A CRLF injection vulnerability exists in the OAuth2 AuthorizationUtils class. When constructing the WWW-Authenticate response header, the 'realm' parameter is concatenated without sanitizing Carriage Return (CR) and Line Feed (LF) characters. If an attacker can control the realm value, they can inject arbitrary HTTP headers or split the HTTP response entirely. Users are recommended to upgrade to versions 4.2.2 or 4.1.7 or 3.6.12, which fixes this issue.","exploit_maturity":"No public exploit","published":"2026-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-50629","description":"The 'clientId' parameter from incoming HTTP requests is directly concatenated into OAuth2 server log warning messages without sanitizing control characters. This allows an attacker to inject arbitrary content, including fake log entries, into the server's log files. Users are recommended to upgrade to versions 4.2.2 or 4.1.7 or 3.6.12, which fixes this issue.","exploit_maturity":"No public exploit","published":"2026-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-50623","description":"An authentication bypass vulnerability exists in the OAuth2 TokenIntrospectionService in Apache CXF. Due to a missing 'throw' keyword in the security context check, the introspection endpoint (/services/oauth2/introspect) can be accessed by any unauthenticated network attacker. However note that this is a safeguard only in the case that someone forgot to enable authentication on the service. Users are recommended to upgrade to version 4.2.2 or 4.1.7 or 3.6.12, which fixes this issue.","exploit_maturity":"No public exploit","published":"2026-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-50560","description":"Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty HTTP/2 max header size handling produces an attack similar to HTTP/2 Rapid Reset. There is a setting in the http2 specification called `SETTINGS_MAX_HEADER_LIST_SIZE`. When a client sends that setting to Netty, it appears that Netty will behave as follows: read the request; proxy the request to the origin; attempt to produce a response; and create an exception while writing the headers for the response. Functionally, this should be similar to the http2 reset attack, but with a different on-the-wire signature. Versions 4.1.135.Final and 4.2.15.Final patch the issue.","exploit_maturity":"No public exploit","published":"2026-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-50020","description":"Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, before reading the first request-line, `HttpObjectDecoder` skips every byte for which `Character.isISOControl(b)` is `true` (0x00–0x1F and 0x7F) as well as all whitespace. RFC 9112 §2.2 only asks servers to ignore empty CRLF lines preceding the request-line — a carefully scoped robustness allowance intended to handle HTTP/1.0 POST workarounds. Silently absorbing NUL bytes, SOH, STX, and other non-CRLF control characters goes significantly beyond this, and can be exploited for request-boundary confusion in pipelined or multiplexed transports where a front-end component treats those bytes differently. Versions 4.1.135.Final and 4.2.15.Final patch the issue.","exploit_maturity":"Proof of concept only","published":"2026-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-50009","description":"Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, Netty QUIC exposes the stateless reset token on the network path when using the default HMAC-based connection-ID and stateless-reset-token generators. The reset token for the server's current source connection ID can be derived from bytes that appear as the connection ID in QUIC headers after a source-CID rotation. An on-path attacker observing the headers can use the token to perform a Denial of Service by sending a spoofed Stateless Reset packet. Version 4.2.15.Final patches the issue.","exploit_maturity":"No public exploit","published":"2026-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-47244","description":"Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, DefaultHttp2Connection.DefaultEndpoint initialises maxActiveStreams/maxStreams to Integer.MAX_VALUE, and Http2Settings never inserts SETTINGS_MAX_CONCURRENT_STREAMS by default (Http2Settings.java:305-307 only clamps a user-supplied value). Unless the application explicitly calls initialSettings().maxConcurrentStreams(n), a Netty HTTP/2 server advertises no limit and enforces none locally. Each open stream allocates a DefaultStream object, PropertyMap slots, flow-controller state and IntObjectHashMap entry; with ~2^30 permissible odd stream IDs a single TCP connection can create hundreds of thousands of long-lived stream objects. This is also the precondition for CVE-2023-44487-style Rapid-Reset amplification, where the absence of a low concurrent cap multiplies backend work. Versions 4.1.135.Final and 4.2.15.Final patch the issue.","exploit_maturity":"No public exploit","published":"2026-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-45673","description":"Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DNS resolver uses a predictable PRNG for generating DNS transaction IDs and defaults to a static UDP source port. This combination reduces the entropy of DNS queries, enabling DNS Cache Poisoning (Kaminsky attack). Versions 4.1.135.Final and 4.2.15.Final patch the issue.","exploit_maturity":"No public exploit","published":"2026-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-45536","description":"Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, netty_unix_socket_recvFd sets msg_control to `char control[CMSG_SPACE(sizeof(int))]` (line 940) — 24 bytes on 64-bit Linux. A peer-sent SCM_RIGHTS cmsg carrying two ints has cmsg_len = CMSG_LEN(8) = 24, which fits exactly with no MSG_CTRUNC, so the kernel installs both fds in the receiving process. The subsequent check `cmsg-\u003ecmsg_len == CMSG_LEN(sizeof(int))` (line 972, expected 20) fails, the branch that would read the fd is skipped, and neither installed fd is closed. The for(;;) loop calls recvmsg again (non-blocking → EAGAIN → Java maps to 0 → read loop exits normally), leaving two leaked fds per message. There is no MSG_CTRUNC handling. Reachable via Epoll/KQueue DomainSocketChannel when the application opts into DomainSocketReadMode.FILE_DESCRIPTORS (non-default). Versions 4.1.135.Final and 4.2.15.Final patch the issue.","exploit_maturity":"No public exploit","published":"2026-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41001","description":"Spring Boot's ArtemisEmbeddedConfigurationFactory uses a fixed, static path for the embedded Artemis message broker's data directory when no explicit path is configured. A local attacker on the same host can pre-create this predictable directory or place a symlink before the application starts.\n\nAffected versions:\nSpring Boot 4.0.0 through 4.0.6; 3.5.0 through 3.5.14; 3.4.0 through 3.4.16; 3.3.0 through 3.3.19; 2.7.0 through 2.7.33.","exploit_maturity":"No public exploit","published":"2026-06-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40997","description":"Several Spring WS integration paths with Spring Security could surface detailed account state (for example locked or disabled user semantics) to remote SOAP clients through exception messages or callback outcomes, instead of failing with generic authentication errors. That behavior assists remote attackers in distinguishing valid accounts from invalid ones and inferring lifecycle state.\n\nAffected versions:\nSpring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.","exploit_maturity":"No public exploit","published":"2026-06-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40996","description":"Wss4jSecurityInterceptor defaulted allowRSA15KeyTransportAlgorithm to true, overriding Apache WSS4J's safer default for validation RequestData. Inbound WS-Security decryption could therefore accept RSA PKCS#1 v1.5 (rsa-1_5) encrypted key material unless operators explicitly reconfigured the flag.\n\nAffected versions:\nSpring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.","exploit_maturity":"No public exploit","published":"2026-06-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40995","description":"X509AuthenticationProvider could issue a fully authenticated X509AuthenticationToken when a presented certificate mapped to UserDetails, without applying Spring Security's standard account lifecycle checks (disabled, locked, expired, or credentials-expired accounts).\n\nAffected versions:\nSpring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.","exploit_maturity":"No public exploit","published":"2026-06-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40992","description":"Spring Boot's Mail auto-configuration does not enable hostname verification. Applications that set the relevant JavaMail property, such as spring.mail.properties.mail.smtp.ssl.checkserveridentity=true, are not affected.\n\nAffected versions:\nSpring Boot 4.0.0 through 4.0.6; 3.5.0 through 3.5.14; 3.4.0 through 3.4.16.","exploit_maturity":"No public exploit","published":"2026-06-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40986","description":"Spring Web Flow's JavaScript RemotingHandler renders the body of an error response as HTML even when the response is not \"text/html\", which can result in a scripting attack in the user's browser if the error response from the server contains error details with input reflected from an attacker.\n\nAffected versions:\nSpring Web Flow 4.0.0; 3.0.0 through 3.0.1; 2.5.0 through 2.5.1.","exploit_maturity":"No public exploit","published":"2026-06-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40985","description":"Applications that configure the WebFlowELExpressionParser are vulnerable to the use of malicious Unified EL expressions.\n\nAffected versions:\nSpring Web Flow 4.0.0; 3.0.0 through 3.0.1; 2.5.0 through 2.5.1.","exploit_maturity":"No public exploit","published":"2026-06-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-11986","description":"A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal endpoints fail to perform granular permission checks when deleting role mappings. This allows a delegated administrator with limited permissions to remove highly privileged roles from other users or groups, potentially disrupting administrative access control.","exploit_maturity":"No public exploit","published":"2026-06-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-53698","description":"Silverpeas through 6.4.6 mishandles the \"Personal space\" feature that is selected when no componentId is set.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-53442","description":"Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job configurations unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-53441","description":"Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the user-provided description of a generic offline cause that could be set through the `POST config.xml` API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-53440","description":"Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the \"from\" parameter in the \"Delegate to servlet container\" security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redirecting users to an attacker-controlled domain.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-53439","description":"Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine other users' configured timezone and to enumerate view names of other users' \"My Views\".","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-53438","description":"A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue items they do not have permission to view.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-53436","description":"Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing attacks.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-42568","description":"Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injection vulnerability exists in `org.yamcs.security.LdapAuthModule` when constructing search filters. The username parameter is inserted directly into the LDAP filter without proper RFC 4515 escaping. Versions 5.13.0 and 5.12.7 patch the issue.","exploit_maturity":"Working exploit published","published":"2026-06-10","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2026-41837","description":"Spring Data REST's Querydsl integration accepts arbitrary persistent property paths as request-parameter filter keys and does not consider Jackson customizations before handing them to Querydsl.\n\nAffected versions:\nSpring Data REST 3.7.0 through 3.7.19; 4.3.0 through 4.3.16; 4.4.0 through 4.4.14; 4.5.0 through 4.5.11; 5.0.0 through 5.0.5.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41730","description":"Spring Data REST serializes the full exception cause chain into HTTP error response bodies, potentially exposing persistence-layer internals to HTTP clients.\n\nAffected versions:\nSpring Data REST 3.7.0 through 3.7.19; 4.3.0 through 4.3.16; 4.4.0 through 4.4.14; 4.5.0 through 4.5.11; 5.0.0 through 5.0.5.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41727","description":"Spring Kafka's retry topic infrastructure did not sufficiently validate user-controlled header values before acting on them. A producer could send a record with a crafted retry_topic-attempts header to supply an out-of-range attempt count and cause the retry topic router to misidentify where the message was in the retry sequence.\n\nAffected versions:\nSpring for Apache Kafka 4.0.0 through 4.0.5; 3.3.0 through 3.3.15; 3.2.0 through 3.2.13; 2.9.0 through 2.9.13; 2.8.0 through 2.8.11.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41726","description":"When an application opts into DelegatingDeserializer, a producer can grow the consumer's heap without bound by sending records with unique random spring.kafka.serialization.selector header values, eventually causing GC thrash and OutOfMemoryError.\n\nAffected versions:\nSpring for Apache Kafka 4.0.0 through 4.0.5; 3.3.0 through 3.3.15; 3.2.0 through 3.2.13; 2.9.0 through 2.9.13; 2.8.0 through 2.8.11.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-41721","description":"Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Support is enabled in conjunction with a Controller method using @ProjectedPayload, when an attacker sends a specially crafted HTTP request that causes the application to allocate lots of memory.\n\nAffected versions:\nSpring Data Commons 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14; 3.3.0 through 3.3.16; 3.2.0 through 3.2.15; 3.1.0 through 3.1.14; 3.0.0 through 3.0.15; 2.7.0 through 2.7.19.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41719","description":"A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator.\n\nAffected versions:\nSpring Data KeyValue / Spring Data Redis 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14; 3.3.0 through 3.3.16; 3.2.0 through 3.2.15; 3.1.0 through 3.1.14; 3.0.0 through 3.0.15; 2.7.0 through 2.7.19.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41714","description":"Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri(\"amqps://...\") without also calling setUseSSL(true) get TLS encryption with no certificate validation and no hostname verification.\n\nAffected versions:\nSpring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1.0 through 3.1.15; 2.4.0 through 2.4.17.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41711","description":"Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters.\n\nAffected versions:\nSpring Data Commons 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14; 3.3.0 through 3.3.16; 3.2.0 through 3.2.15; 3.1.0 through 3.1.14; 3.0.0 through 3.0.15; 2.7.0 through 2.7.19.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41706","description":"Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination after a successful login. In affected versions, the full absolute URL is stored in the cookie and is used without validation as the post-login redirect target.\n\nAffected versions:\nSpring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41701","description":"Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are predictable due to internal simple counter.\n\nAffected versions:\nSpring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1.0 through 3.1.15; 2.4.0 through 2.4.17.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41697","description":"Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher (STARTING, ENDING, or CONTAINING) in Query By Example (QBE). An attacker can supply wildcard characters to perform boolean-based blind data inference.\n\nAffected versions:\nSpring Data Relational/JDBC/R2DBC 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14; 3.3.0 through 3.3.16; 3.2.0 through 3.2.15; 3.1.0 through 3.1.14; 3.0.0 through 3.0.15; 2.4.0 through 2.4.19.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41696","description":"Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a crafted string to break out of the intended regular expression quoting.\n\nAffected versions:\nSpring Data MongoDB 5.0.0 through 5.0.5; 4.5.0 through 4.5.11; 4.4.0 through 4.4.14; 4.3.0 through 4.3.16; 4.2.0 through 4.2.15; 4.1.0 through 4.1.14; 4.0.0 through 4.0.15; 3.4.0 through 3.4.19.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41694","description":"Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature, attackers may be able to craft these SAML payloads and use the Service Provider as a decryption oracle.\n\nAffected versions:\nSpring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41008","description":"Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a malicious authorization request containing an invalid request_uri and an arbitrary, unvalidated redirect_uri, which can lead to an Open Redirect vulnerability.\n\nAffected versions:\nSpring Security 7.0.0 through 7.0.5.\nSpring Authorization Server 1.5.0 through 1.5.7.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40991","description":"When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attack when the documentation-generating tests are next executed.\n\nAffected versions:\nSpring REST Docs 4.0.0; 3.0.0 through 3.0.5; 2.0.0.RELEASE through 2.0.8.RELEASE.","exploit_maturity":"No public exploit","published":"2026-06-10","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-41854","description":"Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18.","exploit_maturity":"No public exploit","published":"2026-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41853","description":"Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","exploit_maturity":"No public exploit","published":"2026-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41852","description":"A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker to invoke unintended application logic.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","exploit_maturity":"No public exploit","published":"2026-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41847","description":"Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL.\n\nAffected versions:\nSpring Framework 5.3.0 through 5.3.48.","exploit_maturity":"No public exploit","published":"2026-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41846","description":"Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle attributes of JSP form tags allow arbitrary HTML/JavaScript code injection, potentially resulting in a cross-site scripting (XSS) vulnerability.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","exploit_maturity":"No public exploit","published":"2026-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41844","description":"A Spring MVC or Spring WebFlux application which configures a mapping for \"/**\" where the view name is not explicitly specified allows an attacker to craft a link resulting in a 302 redirect to an arbitrary external host via the redirect: prefix.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","exploit_maturity":"No public exploit","published":"2026-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41843","description":"Spring MVC and WebFlux applications are vulnerable to Path Traversal attacks when resolving static resources.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","exploit_maturity":"No public exploit","published":"2026-06-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-41841","description":"Spring MVC and WebFlux applications are vulnerable to Information Disclosure attacks when resolving static resources.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","exploit_maturity":"No public exploit","published":"2026-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41840","description":"Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests.\nAffected versions: Spring Framework 7.0.0 through 7.0.7, 6.2.0 through 6.2.18, 6.1.0 through 6.1.27, 5.3.0 through 5.3.48.","exploit_maturity":"No public exploit","published":"2026-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41839","description":"A WebFlux application with a compromised subdomain (for example, compromised via cross-site scripting (XSS)) is vulnerable to an escalation attack exchanging a known session ID for that of an authenticated user.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","exploit_maturity":"No public exploit","published":"2026-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41715","description":"In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects.\n\nAffected versions:\nReactor Netty 1.0.0 through 1.0.51; 1.1.0 through 1.1.35; 1.2.0 through 1.2.17; 1.3.0 through 1.3.5.","exploit_maturity":"No public exploit","published":"2026-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41710","description":"An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it permanently rejects any further updates, causing all later stateful retries and circuit breakers in the application to fail.\n\nAffected versions:\nSpring Retry 2.0.0 through 2.0.12; 1.3.0 through 1.3.4.","exploit_maturity":"No public exploit","published":"2026-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-45581","description":"fabric-chaincode-java is a Java based implementation of Hyperledger Fabric chaincode shim APIs. From version 2.3.1 to before version 2.5.10, when chaincode is deployed in chaincode-as-a-service mode with TLS enabled, the chaincode server INFO level logging includes the TLS private key password in plaintext. An attacker with access to the chaincode server logs could recover the TLS private key password. If the attacker can also obtain the TLS private key, they could impersonate the chaincode server. This issue has been patched in version 2.5.10.","exploit_maturity":"No public exploit","published":"2026-06-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-48480","description":"The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.22.FInal, the codec-ohttp implementation of draft-ietf-ohai-chunked-ohttp does not verify that a cryptographically-signed final chunk was received before the outer HTTP body terminates. An on-path adversary (the OHTTP relay itself, or any MITM on the relay↔gateway or relay↔client transport) can forward a prefix of a legitimate chunked-OHTTP message—cut at a non-final chunk boundary—and close the outer body cleanly, producing no decryption error and no exception in the receiving application. Version 0.0.22.Final fixes the issue.","exploit_maturity":"No public exploit","published":"2026-06-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-48040","description":"The netty incubator codec.bhttp is a java language binary http parser. The library implements Oblivious HTTP (RFC 9458) using BoringSSL's HPKE C library via JNI. When deriving native memory addresses for cryptographic operations versions prior to 0.0.22.Final provide a fallback path for direct ByteBufs that do not expose their memory address through `hasMemoryAddress()`. This fallback occurs when `sun.misc.Unsafe` is unavailable to Netty — for example, when the JVM is started with `-Dio.netty.noUnsafe=true`, when a SecurityManager restricts Unsafe access, or when running on non-HotSpot JVMs. In these configurations, Netty's default `PooledByteBufAllocator` returns `PooledDirectByteBuf` instances for which `hasMemoryAddress()` returns false. Under the enabling JVM configuration, an unauthenticated network attacker can cause the OHTTP gateway to corrupt memory belonging to other concurrent connections and disclose the contents of adjacent pooled direct buffers by triggering cryptographic operations with crafted OHTTP requests. The corruption occurs regardless of whether the AEAD tag verification succeeds, as BoringSSL zeroizes the output buffer on failure. The information disclosure path provides the attacker with the encryption key needed to extract the leaked data. This violates the confidentiality and integrity of all connections sharing the same Netty buffer arena. Version 0.0.22.Final fixes the issue.","exploit_maturity":"No public exploit","published":"2026-06-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41207","description":"The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.21.Final, HKDF_expand returns non-NULL on failure. The byte[] is filled with zeros and has no way to distinguish success from failure. Since this output is used as HKDF key material for the response AEAD, a failure silently produces an all-zero key. When EVP_HPKE_CTX_export fails it also returns an empty byte[] array filled with zeros. This byte[] feeds directly into OHttpCrypto.createResponseAEAD(...). A silent all-zero export secret would produce a deterministic, attacker-predictable AEAD key. Version 0.0.21.Final patches the issue.","exploit_maturity":"No public exploit","published":"2026-06-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-46718","description":"Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite.\n\nThis issue affects Apache Calcite: from 1.5.0 before 1.42.\n\nUsers are recommended to upgrade to version 1.42, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-06-02","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-41115","description":"An improper authorization vulnerability has been identified in Apache Kafka.\n\nThe implementation of the CONSUMER_GROUP_DESCRIBE (69) API validates the DESCRIBE operation on the GROUP resource instead of the READ operation that documented in the official kafka documentation and the KIP-848. This discrepancy can result in misconfigured Access Control Lists (ACLs) and unintended security postures, like granting READ permission to users who should not be able to join/sync groups, or allowing users without READ permission (but with DESCRIBE permission) to access sensitive group metadata.\n\nThe correct permission for CONSUMER_GROUP_DESCRIBE API is DESCRIBE GROUP so the current implementation is correct. However, the kafka documentation as well as the KIP-848 will be updated to reflect the correct permission. We advise the Kafka users to review existing group ACLs to ensure the principle of least privilege.","exploit_maturity":"No public exploit","published":"2026-06-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-49328","description":"Server-Side Request Forgery (SSRF) in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet before 2.0.2-incubating allows attackers to cause outbound network requests to internal or otherwise restricted resources via a user-supplied image URL. Users are recommended to upgrade to version 2.0.2-incubating, which fixes this issue.","exploit_maturity":"No public exploit","published":"2026-06-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-49270","description":"Exposure of Sensitive Information Through Metadata vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All.\n\nBrokers that are configured with a network connector with syncDurableSubs set to true, are vulnerable to an unauthenticated attacker who can receive a list of all durable topic subscriptions in the broker, including client identifiers, subscription names, topic destinations, and JMS selector expressions, by sending a BrokerInfo command. The broker incorrectly responds without first ensuring the connection is authenticated.\nThis issue affects Apache ActiveMQ Broker: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ All: before 5.19.7, from 6.0.0 before 6.2.6.\n\nUsers are recommended to upgrade to version 6.2.6 or 5.19.7, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-06-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-46605","description":"Incomplete authorization by Apache ActiveMQ server before versions v6.2.6 and v5.19.7 allows authenticated connections to remove existing destinations with proper permissions.\n\nThis issue affects Apache ActiveMQ Broker: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ All: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ: before 5.19.7, from 6.0.0 before 6.2.6.\n\nUsers are recommended to upgrade to version v6.2.6 or v5.19.7, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-06-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-42253","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache ActiveMQ, Apache ActiveMQ Web.\n\nThe MessageServlet in the ActiveMQ web console API copies every JMS message\nproperty into an HTTP response header without any validation. This can allow overwriting and injecting security headers by setting them on JMS messages that are returned by the servlet.\n\nThis issue affects Apache ActiveMQ: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ Web: before 5.19.7, from 6.0.0 before 6.2.6.\n\nUsers are recommended to upgrade to version 5.19.7 or 6.2.6, which fixes the issue. The MessageServlet has now been deprecated and disabled by default.","exploit_maturity":"No public exploit","published":"2026-06-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40990","description":"OOM error is possible while attempting to add infinite amount of functions to Function Registry.\n\nAffected Spring Products and Versions:\nSpring Cloud Function 3.2.x: versions prior to 3.2.16\nSpring Cloud Function 4.1.x: versions prior to 4.1.10\nSpring Cloud Function 4.2.x: versions prior to 4.2.6\nSpring Cloud Function 4.3.x: versions prior to 4.3.3\nSpring Cloud Function 5.0.x: versions prior to 5.0.2\nOlder, unsupported versions are also affected.","exploit_maturity":"No public exploit","published":"2026-06-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40989","description":"Under infinite recursion in the routing layer, request-handling can cause OOM error.\n\nAffected Spring Products and Versions:\nSpring Cloud Function 3.2.x: versions prior to 3.2.16\nSpring Cloud Function 4.1.x: versions prior to 4.1.10\nSpring Cloud Function 4.2.x: versions prior to 4.2.6\nSpring Cloud Function 4.3.x: versions prior to 4.3.3\nSpring Cloud Function 5.0.x: versions prior to 5.0.2\nOlder, unsupported versions are also affected.","exploit_maturity":"No public exploit","published":"2026-06-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-9803","description":"A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with a malformed 'Authorization: Bearer' header to any client registration endpoint. This can lead to an ArrayIndexOutOfBoundsException, causing the server to return an HTTP 500 error and resulting in a Denial of Service (DoS) for the affected service.","exploit_maturity":"No public exploit","published":"2026-05-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-9802","description":"A flaw was found in Keycloak. When revokeRefreshToken=true is enabled and persistent session storage is in use, a server restart can reset internal timing mechanisms. This allows a remote attacker, who has previously captured a user's refresh token, to replay that token even after it has been revoked. Successful exploitation grants the attacker unauthorized access to the victim's account, potentially leading to information disclosure or privilege escalation.","exploit_maturity":"No public exploit","published":"2026-05-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-9801","description":"A flaw was found in Keycloak. A remote attacker with high privileges, such as a realm administrator configuring a malicious Lightweight Directory Access Protocol (LDAP) server or an attacker compromising an upstream LDAP server, could exploit this vulnerability. By sending a malformed LDAP password policy response during a password authentication request, the attacker can trigger an OutOfMemoryError. This causes the Keycloak Java Virtual Machine (JVM) to terminate, leading to a denial of service (DoS) for all realms on the affected node.","exploit_maturity":"No public exploit","published":"2026-05-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-9798","description":"A flaw was found in Keycloak, an open-source identity and access management solution. When a user account is temporarily locked due to repeated failed login attempts, an attacker with valid client credentials can exploit the Client-Initiated Backchannel Authentication (CIBA) flow to bypass this brute-force protection. This allows continued authentication attempts and token issuance even when the account should be locked, potentially enabling further unauthorized access attempts.","exploit_maturity":"No public exploit","published":"2026-05-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-9796","description":"A flaw was found in Keycloak. An authenticated administrator with the `manage-clients` role can exploit a Time-of-check to time-of-use (TOCTOU) vulnerability in the name-based admin role checks. This allows the attacker to escalate their privileges to `realm-admin` for all users within the realm, granting them extensive control over the system. The composite role relationship persists even after the attacker's own permissions are revoked and across system reboots.","exploit_maturity":"No public exploit","published":"2026-05-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-9794","description":"A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted SOAP requests to the SAML ECP (Security Assertion Markup Language Enhanced Client or Proxy) endpoint with varying client IDs. By observing distinct faultstrings in the responses, the attacker can determine the client's protocol type, leading to information disclosure.","exploit_maturity":"No public exploit","published":"2026-05-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-9792","description":"A flaw was found in Keycloak's Client Policies, specifically within the `org.keycloak.protocol.oidc` component. When certain condition providers (client-type, client-roles, client-attributes, client-scopes) are used to enforce security restrictions, the `reject-ropc-grant` executor is silently bypassed. This allows an unauthenticated remote attacker to obtain tokens via a Resource Owner Password Credentials (ROPC) grant, even when a policy is explicitly configured to block it. This bypass can lead to unauthorized access and information disclosure.","exploit_maturity":"No public exploit","published":"2026-05-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-9791","description":"A flaw was found in Keycloak. An authenticated user with existing organization membership can exploit this flaw by accessing user-facing APIs, such as the account API or by requesting an OpenID Connect (OIDC) token with the 'organization' scope. This allows organization metadata to be disclosed in tokens, even after an administrator has explicitly disabled the Organizations feature, potentially leading to incorrect authorization decisions by resource servers.","exploit_maturity":"No public exploit","published":"2026-05-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-46843","description":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle REST Data Services. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-05-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46842","description":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle REST Data Services accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-05-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46841","description":"Vulnerability in Oracle REST Data Services (component: General). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle REST Data Services accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-05-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-46830","description":"Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle REST Data Services accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-05-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-40914","description":"A vulnerability exists in Apache Artemis whereby an application using the STOMP protocol with security credentials that grant either the consume or send permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. A user could successfully send a message to an address or consume a message from a queue with a routing-type not supported by the corresponding address when that operation should actually be rejected on the basis that the user doesn't have permission to change the routing-type of the address. Even though the user was already granted permission to send and/or consume messages, they should not be able to augment the routing-type of the address without the createAddress permission.\n\n\n\nThis issue affects Apache Artemis: from 2.50.0 through 2.53.0; Apache ActiveMQ Artemis: from 2.0.0 through 2.44.0.\n\nUsers are recommended to upgrade to version 2.54.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-05-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-9689","description":"A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redirect Uniform Resource Identifiers (URIs), a remote attacker can manipulate the authentication process by crafting a special web address. If a user clicks this link, the client application might incorrectly prioritize attacker-controlled information over legitimate data. This vulnerability, known as HTTP parameter pollution, could allow an attacker to bypass security measures or gain unauthorized access to resources.","exploit_maturity":"No public exploit","published":"2026-05-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-9674","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b_b_d and earlier allows attackers to resume failed Multijob builds.","exploit_maturity":"No public exploit","published":"2026-05-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-5516","description":"IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Server Liberty could allow a remote attacker to bypass security under limited conditions by exploiting a specific timing window.","exploit_maturity":"No public exploit","published":"2026-05-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-48927","description":"Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views.","exploit_maturity":"No public exploit","published":"2026-05-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-48926","description":"Jenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2026-05-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-48925","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.","exploit_maturity":"No public exploit","published":"2026-05-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-48924","description":"Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.","exploit_maturity":"No public exploit","published":"2026-05-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-48923","description":"Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2026-05-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-48919","description":"Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.","exploit_maturity":"No public exploit","published":"2026-05-27","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-48918","description":"Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default.","exploit_maturity":"No public exploit","published":"2026-05-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-48917","description":"Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation.","exploit_maturity":"No public exploit","published":"2026-05-27","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-48916","description":"Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals.","exploit_maturity":"No public exploit","published":"2026-05-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-2255","description":"Hitachi Vantara Pentaho Data Integration \u0026 Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, expose Hadoop cluster credentials in plain text through the Cluster Test API. Although the user should not see those explicitly, the defect is mitigated by the fact the user can already leverage those credentials to submit jobs under the same account through the backend API.","exploit_maturity":"No public exploit","published":"2026-05-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-2254","description":"Hitachi Vantara Pentaho Data Integration \u0026 Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, does not apply ACLs on certain API endpoints related to platform mail notfications.","exploit_maturity":"No public exploit","published":"2026-05-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-47672","description":"epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. In 1.2.4 and earlier, any network-reachable caller can write arbitrary documents to any patient's electronic health record accessible by the institution's SMC-B card. In a misconfigured deployment (e.g., following the production Docker example in the README), this is exploitable from the local network without credentials.","exploit_maturity":"No public exploit","published":"2026-05-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-44598","description":"With valid login credentials, URL Redirection to Untrusted Site ('Open Redirect'), Server-Side Request Forgery (SSRF) vulnerability in Apache Shiro.\n\n\n\n\nThis issue affects Apache Shiro from 2.0-alpha to 2.1.0, and 3.0.0-alpha-1, only when using shiro-jakarta-ee integration module.\n\nUsers are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue by encrypting the cookie.\n\nAfter successful login, Jakarta EE integration module uses shiroSavedRequest cookie to redirect to a particular web page after login.\nThis cookie was not validated, and can be forged to send a HTTP GET request from the server itself to an arbitrary URL from the cookie.","exploit_maturity":"No public exploit","published":"2026-05-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-43828","description":"Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute.\n\n\n\nThis issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1.\n\nUsers are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue.\n\nIn the affected versions, Shiro-native session manager, as well as Remember-Me manager sends JSESSIONID and rememberMe cookies without 'secure' attribute by default.","exploit_maturity":"No public exploit","published":"2026-05-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-43827","description":"Default configurations of Apache Shiro have a session fixation vulnerability.\n\nThis issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1.\n\nUsers are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue.\n\nIn the affected versions, when a session already exists, it is not invalidated upon successful login, nor is a new session being generated with a new ID.","exploit_maturity":"No public exploit","published":"2026-05-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-42797","description":"Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope.\n\nAn administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficient entitlements for User read to access User-related security-sensitive information.\n\nThis issue affects Apache Syncope: 3.0 through 3.0.16, 4.0 through 4.0.5, 4.1.0.\n\nUsers are recommended to upgrade to version 4.0.6 / 4.1.1, which fix this issue by further restricting the JEXL expression definition.","exploit_maturity":"No public exploit","published":"2026-05-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41863","description":"Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk. This could allow a malicious user to write files outside the intended target directory, including restricted directories.\n\nAffected versions:\nSpring AI: 1.1.0 through 1.1.x","exploit_maturity":"No public exploit","published":"2026-05-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-44618","description":"Insecure XML parser configuration in Apache CXF's WS-Transfer module may allow attackers to perform XXE attacks.\nUsers are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11, which fix this issue.","exploit_maturity":"No public exploit","published":"2026-05-22","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-8922","description":"A flaw was found in Keycloak. When both realm-level and client-level `notBefore` revocation policies are configured, Keycloak's OpenID Connect (OIDC) Introspection feature fails to properly honor the realm-level policy. This allows tokens that should have been revoked to remain active, potentially leading to unauthorized access or continued session validity. This could impact the security of systems utilizing Keycloak for identity and access management.","exploit_maturity":"No public exploit","published":"2026-05-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-8830","description":"A flaw was found in Keycloak. An authenticated user can bypass configured WebAuthn policies during credential registration by manipulating client-side JavaScript. This occurs because the server-side processAction() fails to validate that the newly created credential's parameters, such as public key algorithms, match the realm's configured WebAuthn policies. This could lead to the creation of credentials that do not adhere to administrative security requirements, potentially weakening the overall security posture of the system by allowing non-compliant authentication methods.","exploit_maturity":"No public exploit","published":"2026-05-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-4630","description":"A flaw was found in Keycloak. An authenticated client could exploit an Insecure Direct Object Reference (IDOR) vulnerability in the Authorization Services Protection API endpoint. By knowing or obtaining a resource's unique identifier (UUID) belonging to another Resource Server within the same realm, the client could bypass authorization checks. This allows the client to perform unauthorized GET, PUT, and DELETE operations on resources, leading to information disclosure and potential unauthorized modification or deletion of data.","exploit_maturity":"No public exploit","published":"2026-05-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-37982","description":"A flaw was found in Keycloak. This authentication vulnerability allows a remote attacker to replay `ExecuteActionsActionToken` tokens within Keycloak's WebAuthn (Web Authentication) flow. By intercepting an execute-actions email link, an attacker can register their own authenticator to a victim's account. This leads to unauthorized enrollment of a hardware-backed credential, enabling persistent account takeover.","exploit_maturity":"No public exploit","published":"2026-05-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-37981","description":"A flaw was found in Keycloak. A broken access control vulnerability in the Account Resources user lookup endpoint allows a remote authenticated user, who owns at least one User-Managed Access (UMA) resource, to enumerate and harvest personally identifiable information (PII) for all realm users. By sending crafted requests with arbitrary usernames or email values, the endpoint returns full profile objects for unrelated users. This leads to broad profile-level information disclosure.","exploit_maturity":"No public exploit","published":"2026-05-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-37979","description":"A flaw was found in Keycloak. This access control vulnerability in Keycloak's OpenID Connect (OIDC) token introspection endpoint allows a confidential client to bypass audience restrictions. An attacker-controlled client with valid credentials can retrieve sensitive token claims intended for other resource servers, compromising the confidentiality of lightweight access tokens. This issue can be exploited remotely by any confidential client in the realm with valid credentials.","exploit_maturity":"No public exploit","published":"2026-05-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-37978","description":"A flaw was found in Keycloak. A low-privilege administrator with the 'view-clients' role can exploit this by invoking the 'evaluate-scopes' Admin API endpoints with an arbitrary user ID (userId) parameter. This vulnerability allows for cross-role personally identifiable information (PII) leakage, enabling unauthorized visibility into user identities and authorizations across the realm. Exploitation is possible remotely via network access to the Admin API.","exploit_maturity":"No public exploit","published":"2026-05-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-8771","description":"A security flaw has been discovered in linlinjava litemall up to 1.8.0. This impacts the function list of the file litemall-wx-api/src/main/java/org/linlinjava/litemall/wx/web/WxGoodsController.java of the component Front-end WeChat API. Performing a manipulation results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","exploit_maturity":"Proof of concept only","published":"2026-05-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-8759","description":"A vulnerability was identified in xiandafu beetl up to 3.20.2. Affected is an unknown function of the file beetl-classic-integration/beetl-spring-classic/src/main/java/org/beetl/ext/spring/SpELFunction.java of the component SpELFunction. The manipulation leads to improper neutralization of special elements used in an expression language statement. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.","exploit_maturity":"Proof of concept only","published":"2026-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-45205","description":"Uncontrolled Recursion vulnerability in Apache Commons.\n\nWhen processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles.\nThis issue affects Apache Commons: from 2.2 before 2.15.0.\n\nUsers are recommended to upgrade to version 2.15.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-05-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-44308","description":"Spring Cloud AWS simplifies using AWS managed services in a Spring and Spring Boot applications. From 3.0.0 to 4.0.1, pplications using Spring Cloud AWS SNS HTTP/HTTPS endpoint support (@NotificationMessageMapping, @NotificationSubscriptionMapping, @NotificationUnsubscribeConfirmationMapping) did not verify the signature of incoming SNS messages. An unauthenticated attacker who knows the endpoint URL could send crafted HTTP POST requests mimicking SNS Notification or SubscriptionConfirmation messages. This vulnerability is fixed in 4.0.2.","exploit_maturity":"No public exploit","published":"2026-05-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-42580","description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's chunk size parser silently overflows int, enabling request smuggling attacks. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.","exploit_maturity":"Proof of concept only","published":"2026-05-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-42188","description":"Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition. Prior to 2.9.3, a server-side request forgery (SSRF) vulnerability exists in Geyser’s handling of Bedrock player head texture data. By supplying a crafted Base64-encoded skin texture URL via the /give command, an attacker can cause the Minecraft server to issue arbitrary HTTP GET requests to attacker-controlled or internal endpoints. This occurs server-side, without proper URL validation, and can be triggered by a Bedrock client. This vulnerability is fixed in 2.9.3.","exploit_maturity":"Proof of concept only","published":"2026-05-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-0391","description":"The check user account lock states feature within the email OTP flow fails to validate user input, allowing an attacker to infer the existence of registered user accounts.\n\nThe discovery of valid usernames can increase the risk of brute-force and social engineering attacks. Attackers can leverage this information to craft targeted phishing campaigns or other malicious activities aimed at tricking users into divulging sensitive data, potentially damaging the organization's reputation and leading to regulatory non-compliance and financial consequences.","exploit_maturity":"No public exploit","published":"2026-05-11","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-42333","description":"Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation. Prior to versions 2.11.1-lts, 2.16.0-lts, and 2.17.0, the generated authentication filter matches OpenAPI path templates too broadly when deciding whether to attach credentials. A security scheme configured for one operation can therefore be applied to a different same-method operation whose path only partially resembles the protected template, causing bearer tokens, API keys, or basic credentials to be sent to unintended endpoints. This issue has been patched in versions 2.11.1-lts, 2.16.0-lts, and 2.17.0.","exploit_maturity":"Proof of concept only","published":"2026-05-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-8149","description":"A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Linux, X86_64, AVX, AVX-512f.\n\n This vulnerability is associated with program files gcm128w, gcm512w, gcm128w.C, gcm512w.C.\n\n\n\nThis issue affects BC-LTS: from 2.73.0 before 2.73.11; BC-FJA: from 2.1.0 before 2.1.3.","exploit_maturity":"No public exploit","published":"2026-05-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-42345","description":"A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp.","exploit_maturity":"No public exploit","published":"2026-05-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-42343","description":"A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type.","exploit_maturity":"Working exploit published","published":"2026-05-08","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2026-41004","description":"When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs.\nSpring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclusive); upgrade to 3.1.14 or greater (Enterprise Support Only). Spring Cloud Config 4.1.x: affected from 4.1.0 through 4.1.9 (inclusive); upgrade to 4.1.10 or greater (Enterprise Support Only). Spring Cloud Config 4.2.x: affected from 4.2.0 through 4.2.6 (inclusive); upgrade to 4.2.7 or greater (Enterprise Support Only). Spring Cloud Config 4.3.x: affected from 4.3.0 through 4.3.2 (inclusive); upgrade to 4.3.3 or greater. Spring Cloud Config 5.0.x: affected from 5.0.0 through 5.0.2 (inclusive); upgrade to 5.0.3 or greater.","exploit_maturity":"No public exploit","published":"2026-05-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-6860","description":"A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g. if the server is configured with a certificate accepting *.example.com, any XYZ.example.com where xyz is a valid name can be used.","exploit_maturity":"Proof of concept only","published":"2026-05-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-43975","description":"FolderUploadsFileManager in Apache Wicket does not validate or sanitize the uploadFieldId parameter or the clientFileName\n before constructing file paths, allowing an unauthenticated attacker to\n write arbitrary files outside the intended upload directory or read \nfiles from arbitrary locations on the server.\n\nThis issue affects Apache Wicket: from 8.0.0 through 8.17.0, from 9.0.0 through 9.22.0, from 10.0.0 through 10.8.0.\n\nUsers are recommended to upgrade to version 10.9.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-05-06","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-42509","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Wicket.\n\nThis issue affects Apache Wicket: from 8.0.0 through 8.17.0, 9.0.0, from 10.0.0 through 10.8.0.\n\nUsers are recommended to upgrade to version 10.9.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-05-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41417","description":"Netty allows request-line validation to be bypassed when a `DefaultHttpRequest` or `DefaultFullHttpRequest` is created first and its URI is later changed via `setUri()`. The constructors reject CRLF and whitespace characters that would break the start-line, but `setUri()` does not apply the same validation. `HttpRequestEncoder` and `RtspEncoder` then write the URI into the request line verbatim. If attacker-controlled input reaches `setUri()`, this enables CRLF injection and insertion of additional HTTP or RTSP requests, leading to HTTP request smuggling or desynchronization on the HTTP side and request injection on the RTSP side. This issue is fixed in versions 4.2.13.Final and 4.1.133.Final.","exploit_maturity":"Proof of concept only","published":"2026-05-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-6501","description":"Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup.\n\nThis issue affects jOpenDocument: 1.5.","exploit_maturity":"No public exploit","published":"2026-05-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-42140","description":"PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes. Prior to version 2.4.1, the PlantUML Macro is vulnerable to Server-Side Request Forgery (SSRF). The macro allows users to specify an alternative PlantUML server via the server parameter. However, the application does not validate the supplied URL. An attacker can supply an internal IP address or a malicious external URL. The XWiki server will attempt to connect to this URL to \"render\" the diagram. This issue has been patched in version 2.4.1.","exploit_maturity":"No public exploit","published":"2026-05-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-7500","description":"When Keycloak is started with `--features-disabled=account,account-api`, the Account REST API is only partially disabled. Five endpoints under the versioned path `/account/v1alpha1` remain fully functional — including both read and write operations — because they lack the `checkAccountApiEnabled()` gate that correctly blocks four other endpoints in the same REST service class. The user needs to have permissions to use the API.","exploit_maturity":"No public exploit","published":"2026-04-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-36766","description":"Multiple authenticated cross-site scripting (XSS) vulnerabilities in the XssHttpServletRequestWrapper class of shopizer v3.2.5 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the getInputStream() or getReader() functions.","exploit_maturity":"Proof of concept only","published":"2026-04-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-42525","description":"Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.","exploit_maturity":"No public exploit","published":"2026-04-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-42522","description":"A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials.","exploit_maturity":"No public exploit","published":"2026-04-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-42521","description":"Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) invokes parameterless constructors of classes specified in configuration when deserializing inheritance strategies, without restricting the classes that can be instantiated, allowing attackers with Item/Configure permission to instantiate arbitrary types, which may lead to information disclosure or other impacts depending on the classes available on the classpath.","exploit_maturity":"No public exploit","published":"2026-04-29","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-42519","description":"A missing permission check in Jenkins Script Security Plugin 1399.ve6a_66547f6e1 and earlier allows attackers with Overall/Read permission to enumerate pending and approved Script Security classpaths.","exploit_maturity":"No public exploit","published":"2026-04-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-22745","description":"Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources.\n\n\nMore precisely, an application can be vulnerable when all the following are true:\n\n * the application is using Spring MVC or Spring WebFlux\n * the application is serving static resources from the file system\n * the application is running on a Windows platform\n\n\nWhen all the conditions above are met, the attacker can send malicious requests that are slow to resolve and that can keep HTTP connections in use. This can cause a Denial of Service on the application.","exploit_maturity":"No public exploit","published":"2026-04-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-22740","description":"A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space.\n\nOlder, unsupported versions are also affected.","exploit_maturity":"No public exploit","published":"2026-04-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40980","description":"In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by `ForkPDFLayoutTextStripper`.\n\nAffected versions:\nSpring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)","exploit_maturity":"No public exploit","published":"2026-04-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40979","description":"In Spring AI, having access to a shared environment can expose the ONNX model used by the application.\n\nAffected versions:\nSpring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)","exploit_maturity":"No public exploit","published":"2026-04-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40977","description":"When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can corrupt one file on the host each time the application is started.\n\nAffected: Spring Boot 4.0.0–4.0.5 (fix 4.0.6), 3.5.0–3.5.13 (fix 3.5.14), 3.4.0–3.4.15 (fix 3.4.16), 3.3.0–3.3.18 (fix 3.3.19), 2.7.0–2.7.32 (fix 2.7.33); PID file / symlink behavior (`ApplicationPidFileWriter`). Versions that are no longer supported are also affected per vendor advisory.","exploit_maturity":"No public exploit","published":"2026-04-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40969","description":"The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the authentication failure, which may be useful for further attacks.\n\nAffected versions:\nSpring gRPC: 1.0.0 - 1.0.2 (fixed in 1.0.3). Older, unsupported versions are also affected.","exploit_maturity":"No public exploit","published":"2026-04-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40966","description":"In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conversationId. Only applications that use VectorStoreChatMemoryAdvisor and pass user-supplied input as a conversationId are affected.","exploit_maturity":"No public exploit","published":"2026-04-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41081","description":"Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm\n\nVersions Affected: up to 2.8.7\n\nDescription: When TLS transport is enabled in Apache Storm without requiring client certificate authentication (the default configuration), the TlsTransportPlugin assigns a fallback principal (CN=ANONYMOUS) if no client certificate is presented or if certificate verification fails. The underlying SSLPeerUnverifiedException is caught and suppressed rather than rejecting the connection.\n\nThis fail-open behavior means an unauthenticated client can establish a TLS connection and receive a valid principal identity. If the configured authorizer (e.g., SimpleACLAuthorizer) does not explicitly deny access to CN=ANONYMOUS, this may result in unauthorized access to Storm services. The condition is logged at debug level only, reducing visibility in production.\n\nImpact: Unauthenticated clients may be assigned a principal identity, potentially bypassing authorization in permissive or misconfigured environments.\n\nMitigation: Users should upgrade to 2.8.7 in which TLS authentication failures are handled in a fail-closed manner.\n\nUsers who cannot upgrade immediately should:\n- Enable mandatory client certificate authentication (nimbus.thrift.tls.client.auth.required: true)\n- Ensure authorization rules explicitly deny access to CN=ANONYMOUS\n- Review all ACL configurations for implicit default-allow behavior","exploit_maturity":"No public exploit","published":"2026-04-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40970","description":"When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server.\n\nAffected: Spring Boot 4.0.0–4.0.5; upgrade to 4.0.6 or later per vendor advisory.","exploit_maturity":"No public exploit","published":"2026-04-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40557","description":"Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter\n\n\nVersions Affected: from 2.6.3 to 2.8.6\n\n\nDescription: \n\nIn production deployments where an administrator enables storm.daemon.metrics.reporter.plugin.prometheus.skip_tls_validation (by default it is disabled) intending to affect only the Prometheus reporter, the undocumented global side effect creates an attack surface across every TLS-protected communication channel in the Storm daemon.\n\n\nThe PrometheusPreparableReporter class implements an INSECURE_TRUST_MANAGER that accepts all SSL certificates without validation, with empty checkClientTrusted and checkServerTrusted methods. Most critically, when the storm.daemon.metrics.reporter.plugin.prometheus.skip_tls_validation configuration option is enabled (default = disabled) for HTTPS Prometheus PushGateway connections, the INSECURE_CONNECTION_FACTORY calls SSLContext.setDefault(sslContext), which globally replaces the JVM's default SSL context rather than applying the insecure context only to the Prometheus connection. This payload flows through storm.yaml configuration → PrometheusPreparableReporter.prepare() → INSECURE_CONNECTION_FACTORY → SSLContext.setDefault(), resulting in a JVM-wide TLS security downgrade. All subsequent HTTPS connections in the process - including ZooKeeper, Thrift, Netty, and UI connections - silently trust all certificates, including self-signed, expired, and attacker-generated ones, enabling man-in-the-middle interception of cluster state, topology submissions, tuple data, and administrative credentials.\n\n\n\n\nMitigation: 2.x users should upgrade to 2.8.7 if the Prometheus Metrics Reporter is used. Prometheus Metrics Reporter Users who cannot upgrade immediately should remove the storm.daemon.metrics.reporter.plugin.prometheus.skip_tls_validation: true setting from their storm.yaml configuration and instead configure a proper truststore containing the PushGateway's certificate.","exploit_maturity":"No public exploit","published":"2026-04-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-7045","description":"A vulnerability was determined in baomidou dynamic-datasource 2.5.0. Affected by this vulnerability is the function DsSpelExpressionProcessor#doDetermineDatasource of the file dynamic-datasource-spring/src/main/java/com/baomidou/dynamic/datasource/processor/DsSpelExpressionProcessor.java of the component StandardEvaluationContext/SpelExpressionParser. This manipulation causes injection. The attack may be initiated remotely. Patch name: 273fcedaee984c08197c0890f14190b86ab7e0b8. It is recommended to apply a patch to fix this issue.","exploit_maturity":"No public exploit","published":"2026-04-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-41043","description":"Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache ActiveMQ, Apache ActiveMQ Web.\n\nAn authenticated attacker can show malicious content when browsing queues in the web console by overriding the content type to be HTML (instead of XML) and by injecting HTML into a JMS selector field.\n\nThis issue affects Apache ActiveMQ: before 5.19.6, from 6.0.0 before 6.2.5; Apache ActiveMQ Web: before 5.19.6, from 6.0.0 before 6.2.5.\n\nUsers are recommended to upgrade to version 6.2.5 or 5.19.6, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-04-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62233","description":"Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module.\n\nThis issue affects Apache DolphinScheduler: \n\nVersion \u003e= 3.2.0 and \u003c 3.3.1.\n\nAttackers who can access the Master or Worker nodes can compromise the system by creating a StandardRpcRequest, injecting a malicious class type into it, and sending RPC requests to the DolphinScheduler Master/Worker nodes.\nUsers are recommended to upgrade to version [3.3.1], which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-04-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-30139","description":"A reflected cross-site scripting (XSS) vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute arbitrary JavaScript in the context of a user's browser via crafted input.","exploit_maturity":"Proof of concept only","published":"2026-04-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-22748","description":"Vulnerability in Spring Spring Security. When an application configures JWT decoding with NimbusJwtDecoder  or NimbusReactiveJwtDecoder, it must configure an OAuth2TokenValidator\u003cJwt\u003e separately, for example by calling setJwtValidator.This issue affects Spring Security: from 6.3.0 through 6.3.14, from 6.4.0 through 6.4.14, from 6.5.0 through 6.5.9, from 7.0.0 through 7.0.4.","exploit_maturity":"No public exploit","published":"2026-04-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40942","description":"The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN 2.0 and FHIR R4 standards. Prior to 2.1.0, The OIDC JWKS and Metadata Document caches used an inverted time comparison (isBefore instead of isAfter), causing the cache to never return cached values. Every incoming request triggered a fresh HTTP fetch of the OIDC Metadata Document and JWKS keys from the OIDC provider. The OIDC token cache for the FHIR client connections used an inverted time comparison (isBefore instead of isAfter), causing the cache to never invalidate. Every incoming request returned the same OIDC token even if expired. This vulnerability is fixed in 2.1.0.","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40939","description":"The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN 2.0 and FHIR R4 standards. Prior to 2.1.0, OIDC-authenticated sessions had no configured maximum inactivity timeout. Sessions persisted indefinitely after login, even after the OIDC access token expired. This vulnerability is fixed in 2.1.0.","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-35252","description":"Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracle SSL API). Supported versions that are affected are 12.2.1.4.0 and 12.1.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Security Service. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Security Service accessible data as well as unauthorized access to critical data or complete access to all Oracle Security Service accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-35244","description":"Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.24.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Infrastructure Technology accessible data as well as unauthorized read access to a subset of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 5.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-35241","description":"Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student Records. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Student Records accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-35232","description":"Vulnerability in Oracle Fusion Middleware (component: Dynamic Monitoring Service). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Fusion Middleware. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Fusion Middleware, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Fusion Middleware accessible data as well as unauthorized read access to a subset of Oracle Fusion Middleware accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34325","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Financial Services Analytical Applications Infrastructure executes to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 6.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34324","description":"Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: App Server). Supported versions that are affected are 7.0.1.0 and 7.0.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Life Sciences InForm. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Life Sciences InForm accessible data as well as unauthorized read access to a subset of Oracle Life Sciences InForm accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34323","description":"Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: IDM Authentication). Supported versions that are affected are 7.0.1.0 and 7.0.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Life Sciences InForm. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Life Sciences InForm accessible data as well as unauthorized read access to a subset of Oracle Life Sciences InForm accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Life Sciences InForm. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34321","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34315","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34314","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized access to critical data or complete access to all Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34313","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34307","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow). Supported versions that are affected are 8.61-8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34306","description":"Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Project Costing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Project Costing accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34302","description":"Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Workflow. While the vulnerability is in Oracle Workflow, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Workflow accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Workflow. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34301","description":"Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Maintenance Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Maintenance Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34300","description":"Vulnerability in the PeopleSoft Enterprise FIN Contracts product of Oracle PeopleSoft (component: Contracts). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Contracts. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Contracts accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34299","description":"Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Maintenance Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Maintenance Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34298","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data as well as unauthorized read access to a subset of Oracle Applications Framework accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Applications Framework. CVSS 3.1 Base Score 4.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34296","description":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile Product Lifecycle Management for Process accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34295","description":"Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Purchasing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise SCM Purchasing accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34294","description":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microsoft Active Directory). The supported version that is affected is 12.2.1.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Identity Manager Connector. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Identity Manager Connector accessible data as well as unauthorized read access to a subset of Oracle Identity Manager Connector accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34289","description":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Identity Manager Connector. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Identity Manager Connector accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34288","description":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager Connector. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Identity Manager Connector accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34284","description":"Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human workflow 11g+). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Process Management Suite. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Process Management Suite, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Process Management Suite accessible data as well as unauthorized read access to a subset of Oracle Business Process Management Suite accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34283","description":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Identity Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Identity Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Identity Manager accessible data as well as unauthorized read access to a subset of Oracle Identity Manager accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34280","description":"Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Job Profile Manager). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise HCM Human Resources accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34277","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.61-8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34274","description":"Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Configurator, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Configurator accessible data as well as unauthorized read access to a subset of Oracle Configurator accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34273","description":"Vulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected are 23.4-23.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GoldenGate accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34269","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-34266","description":"Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Absence Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise HCM Absence Management accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise HCM Absence Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-22751","description":"Vulnerability in Spring Spring Security. Applications that explicitly configure One-Time Token login with JdbcOneTimeTokenService are vulnerable to a Time-of-check Time-of-use (TOCTOU) race condition. This issue affects Spring Security: from 6.4.0 through 6.4.15, from 6.5.0 through 6.5.9, from 7.0.0 through 7.0.4.","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-22021","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and 21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-22019","description":"Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft (component: Person Search). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Shared Components. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HCM Shared Components, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Shared Components accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Shared Components accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-22006","description":"Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Employee Snapshot). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HCM Human Resources, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Human Resources accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-33558","description":"Information exposure vulnerability has been identified in Apache Kafka.\n\nThe NetworkClient component will output entire requests and responses information in the DEBUG log level in the logs. By default, the log level is set to INFO level. If the DEBUG level is enabled, the sensitive information will be exposed via the requests and responses output log. The entire lists of impacted requests and responses are:\n\n\n * AlterConfigsRequest\n\n * AlterUserScramCredentialsRequest\n\n * ExpireDelegationTokenRequest\n\n * IncrementalAlterConfigsRequest\n\n * RenewDelegationTokenRequest\n\n * SaslAuthenticateRequest\n\n * createDelegationTokenResponse\n\n * describeDelegationTokenResponse\n\n * SaslAuthenticateResponse\n\n\nThis issue affects Apache Kafka: from any version supported the listed API above through v3.9.1, v4.0.0. We advise the Kafka users to upgrade to v3.9.2, v4.0.1, or later to avoid this vulnerability.","exploit_maturity":"No public exploit","published":"2026-04-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40490","description":"The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. When redirect following is enabled (followRedirect(true)), versions of AsyncHttpClient prior to 3.0.9 and 2.14.5 forward Authorization and Proxy-Authorization headers along with Realm credentials to arbitrary redirect targets regardless of domain, scheme, or port changes. This leaks credentials on cross-domain redirects and HTTPS-to-HTTP downgrades. Additionally, even when stripAuthorizationOnRedirect is set to true, the Realm object containing plaintext credentials is still propagated to the redirect request, causing credential re-generation for Basic and Digest authentication schemes via NettyRequestFactory. An attacker who controls a redirect target (via open redirect, DNS rebinding, or MITM on HTTP) can capture Bearer tokens, Basic auth credentials, or any other Authorization header value. The fix in versions 3.0.9 and 2.14.5 automatically strips Authorization and Proxy-Authorization headers and clears Realm credentials whenever a redirect crosses origin boundaries (different scheme, host, or port) or downgrades from HTTPS to HTTP. For users unable to upgrade, set `(stripAuthorizationOnRedirect(true))` in the client config and avoid using Realm-based authentication with redirect following enabled. Note that `(stripAuthorizationOnRedirect(true))` alone is insufficient on versions prior to 3.0.9 and 2.14.5 because the Realm bypass still re-generates credentials. Alternatively, disable redirect following (`followRedirect(false)`) and handle redirects manually with origin validation.","exploit_maturity":"No public exploit","published":"2026-04-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-34164","description":"Valtimo is an open-source business process automation platform. In versions 13.0.0 through 13.21.0, the InboxHandlingService logs the full content of every incoming inbox message at INFO level. Inbox messages can contain highly sensitive information including personal data (PII), citizen identifiers (BSN), and case details. This data is exposed to anyone with access to application logs or any Valtimo user with the admin role through the Admin UI logging module. This issue has been fixed in version 13.22.0. If developers are unable to upgrade immediately, they can restrict access to application logs and adjust the log level for com.ritense.inbox to WARN or higher in their application configuration as a workaround.","exploit_maturity":"No public exploit","published":"2026-04-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-5588","description":"Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules), Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All (pkix modules), Legion of the Bouncy Castle Inc. BCPIX-LTS bcpkix on All (pkix modules).\n\n This vulnerability is associated with program files JcaContentVerifierProviderBuilder.Java, JcaContentVerfierProviderBuilder.Java.\n\n\n\nThis issue affects BC-JAVA: from 1.67 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84; BCPKIX-FIPS: from 2.0.6 before 2.0.11, from 2.1.7 before 2.1.11; BCPIX-LTS: from 2.73.7 before 2.73.11.","exploit_maturity":"No public exploit","published":"2026-04-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-40105","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 10.4-rc-1, through 16.10.15, 17.0.0-rc-1, through 17.4.7 and 17.5.0-rc-1 through 17.10.0 contain a reflected cross-site scripting vulnerability (XSS) in the comparison view between revisions of a page allows executing JavaScript code in the user's browser. If the current user is an admin, this can not only affect the current user but also the confidentiality, integrity and availability of the whole XWiki instance. If developers are unable to update immediately, they can apply the patch manually to templates/changesdoc.vm in the deployed WAR.","exploit_maturity":"Working exploit published","published":"2026-04-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2026-40104","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 1.8-rc-1, 17.0.0-rc-1 and 17.5.0-rc-1 and prior include a resource exhaustion vulnerability in REST API endpoints such as /xwiki/rest/wikis/xwiki/spaces/AnnotationCode/pages/AnnotationConfig/objects/AnnotationCode.AnnotationConfig/0/properties, which list all available pages as part of the metadata for database list properties without applying query limits. On large wikis, this can exhaust available server resources. This issue has been patched in versions 16.10.16, 17.4.8 and 17.10.1.","exploit_maturity":"No public exploit","published":"2026-04-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-0636","description":"Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules).\n\n This vulnerability is associated with program files LDAPStoreHelper.\n\n\n\nThis issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.","exploit_maturity":"No public exploit","published":"2026-04-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-37980","description":"A flaw was found in Keycloak, specifically in the organization selection login page. A remote attacker with `manage-realm` or `manage-organizations` administrative privileges can exploit a Stored Cross-Site Scripting (XSS) vulnerability. This flaw occurs because the `organization.alias` is placed into an inline JavaScript `onclick` handler, allowing a crafted JavaScript payload to execute in a user's browser when they view the login page. Successful exploitation enables arbitrary JavaScript execution, potentially leading to session theft, unauthorized account actions, or further attacks against users of the affected realm.","exploit_maturity":"No public exploit","published":"2026-04-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-33929","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.\n\nThis issue affects the \nExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7.\n\n\nUsers are recommended to update to version 2.0.37 or 3.0.8 once \navailable. Until then, they should apply the fix provided in GitHub PR \n427.\n\nThe ExtractEmbeddedFiles example contained a path traversal vulnerability (CWE-22) mentioned in CVE-2026-23907. However the change in the releases 2.0.36 and 3.0.7 is flawed because it doesn't consider the file path separator. Because of that, a user having writing rights on /home/ABC could be victim to a malicious PDF resulting in a write attempt to any path starting with /home/ABC, e.g. \"/home/ABCDEF\".\n\nUsers who have copied this example into their production code should apply the mentioned change. The example \nhas been changed accordingly and is available in the project repository.","exploit_maturity":"No public exploit","published":"2026-04-14","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-35565","description":"Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI\n\n\nVersions Affected: before 2.8.6\n\n\nDescription: The Storm UI visualization component interpolates topology metadata including component IDs, stream names, and grouping values directly into HTML via innerHTML in parseNode() and parseEdge() without sanitization at any layer. An authenticated user with topology submission rights could craft a topology containing malicious HTML/JavaScript in component identifiers (e.g., a bolt ID containing an onerror event handler). This payload flows through Nimbus → Thrift → the Visualization API → vis.js tooltip rendering, resulting in stored cross-site scripting. \n\nIn multi-tenant deployments where topology submission is available to less-trusted users but the UI is accessed by operators or administrators, this enables privilege escalation through script execution in an admin's browser session.\n\n\nMitigation: 2.x users should upgrade to 2.8.6. Users who cannot upgrade immediately should monkey-patch the parseNode() and parseEdge() functions in the visualization JavaScript file to HTML-escape all API-supplied values including nodeId, :capacity, :latency, :component, :stream, and :grouping before interpolation into tooltip HTML strings, and should additionally restrict topology submission to trusted users via Nimbus ACLs as a defense-in-depth measure. A guide on how to do this is available in the release notes of 2.8.6.\n\nCredit: This issue was discovered while investigating another report by K.","exploit_maturity":"No public exploit","published":"2026-04-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-34481","description":"Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite floating-point values (NaN, Infinity, or -Infinity), which are prohibited by RFC 8259. This may cause downstream log processing systems to reject or fail to index affected records.\n\nAn attacker can exploit this issue only if both of the following conditions are met:\n\n * The application uses JsonTemplateLayout.\n * The application logs a MapMessage, or logs an object directly (e.g., via Logger.info(Object), which wraps it in an ObjectMessage), where the message contains an attacker-controlled floating-point value.\n\n\nUsers are advised to upgrade to Apache Log4j JSON Template Layout 2.25.4, which corrects this issue.\n\nNote: The fix released in version 2.25.4 did not cover all affected code paths. CVE-2026-49844 was assigned to the remaining issue, which concerns the MapMessage.asJson() serialization in Apache Log4j API and is fixed in versions 2.25.5 and 2.26.1.","exploit_maturity":"No public exploit","published":"2026-04-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-34480","description":"Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout , in versions up to and including 2.25.3, fails to sanitize characters forbidden by the XML 1.0 specification https://www.w3.org/TR/xml/#charsets producing invalid XML output whenever a log message or MDC value contains such characters.\n\nThe impact depends on the StAX implementation in use:\n\n * JRE built-in StAX: Forbidden characters are silently written to the output, producing malformed XML. Conforming parsers must reject such documents with a fatal error, which may cause downstream log-processing systems to drop the affected records.\n * Alternative StAX implementations (e.g., Woodstox https://github.com/FasterXML/woodstox , a transitive dependency of the Jackson XML Dataformat module): An exception is thrown during the logging call, and the log event is never delivered to its intended appender, only to Log4j's internal status logger.\n\n\nUsers are advised to upgrade to Apache Log4j Core 2.25.4, which corrects this issue by sanitizing forbidden characters before XML output.","exploit_maturity":"No public exploit","published":"2026-04-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-34479","description":"The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1.0 standard, producing malformed XML output. Conforming XML parsers are required to reject documents containing such characters with a fatal error, which may cause downstream log processing systems to drop or fail to index affected records.\n\nTwo groups of users are affected:\n\n * Those using Log4j1XmlLayout directly in a Log4j Core 2 configuration file.\n * Those using the Log4j 1 configuration compatibility layer with org.apache.log4j.xml.XMLLayout specified as the layout class.\n\n\nUsers are advised to upgrade to Apache Log4j 1-to-Log4j 2 bridge version 2.25.4, which corrects this issue.\n\nNote: The Apache Log4j 1-to-Log4j 2 bridge is deprecated and will not be present in Log4j 3. Users are encouraged to consult the Log4j 1 to Log4j 2 migration guide https://logging.apache.org/log4j/2.x/migrate-from-log4j1.html , and specifically the section on eliminating reliance on the bridge.","exploit_maturity":"No public exploit","published":"2026-04-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-34478","description":"Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424Layout , in versions 2.21.0 through 2.25.3, is vulnerable to log injection via CRLF sequences due to undocumented renames of security-relevant configuration attributes.\n\nTwo distinct issues affect users of stream-based syslog services who configure Rfc5424Layout directly:\n\n * The newLineEscape attribute was silently renamed, causing newline escaping to stop working for users of TCP framing (RFC 6587), exposing them to CRLF injection in log output.\n * The useTlsMessageFormat attribute was silently renamed, causing users of TLS framing (RFC 5425) to be silently downgraded to unframed TCP (RFC 6587), without newline escaping.\n\n\nUsers of the SyslogAppender are not affected, as its configuration attributes were not modified.\n\nUsers are advised to upgrade to Apache Log4j Core 2.25.4, which corrects this issue.","exploit_maturity":"No public exploit","published":"2026-04-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-34477","description":"The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was incomplete: it addressed hostname verification only when enabled via the log4j2.sslVerifyHostName https://logging.apache.org/log4j/2.x/manual/systemproperties.html#log4j2.sslVerifyHostName system property, but not when configured through the verifyHostName https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName attribute of the \u003cSsl\u003e element.\n\nAlthough the verifyHostName configuration attribute was introduced in Log4j Core 2.12.0, it was silently ignored in all versions through 2.25.3, leaving TLS connections vulnerable to interception regardless of the configured value.\n\nA network-based attacker may be able to perform a man-in-the-middle attack when all of the following conditions are met:\n\n * An SMTP, Socket, or Syslog appender is in use.\n * TLS is configured via a nested \u003cSsl\u003e element.\n * The attacker can present a certificate issued by a CA trusted by the appender's configured trust store, or by the default Java trust store if none is configured.\nThis issue does not affect users of the HTTP appender, which uses a separate verifyHostname https://logging.apache.org/log4j/2.x/manual/appenders/network.html#HttpAppender-attr-verifyHostName attribute that was not subject to this bug and verifies host names by default.\n\nUsers are advised to upgrade to Apache Log4j Core 2.25.4, which corrects this issue.","exploit_maturity":"No public exploit","published":"2026-04-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-34500","description":"CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.20, from 10.1.22 through 10.1.53, from 9.0.92 through 9.0.116.\n\nUsers are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-33005","description":"Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings.\n\nAny registered user can query web service with their credentials and get files/sub-folders of any folder by ID (metadata only NOT contents). Metadata includes id, type, name and some other field. Full list of fields get be checked at FileItemDTO object.\n\nThis issue affects Apache OpenMeetings: from 3.10 before 9.0.0.\n\nUsers are recommended to upgrade to version 9.0.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-32990","description":"Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614.\n\nThis issue affects Apache Tomcat: from 11.0.15 through 11.0.19, from 10.1.50 through 10.1.52, from 9.0.113 through 9.0.115.\n\nUsers are recommended to upgrade to version 11.0.20, 10.1.53 or 9.0.116, which fix the issue.","exploit_maturity":"No public exploit","published":"2026-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-25854","description":"Occasional URL redirection to untrusted Site ('Open Redirect') vulnerability in Apache Tomcat via the LoadBalancerDrainingValve.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M1 through 10.1.52, from 9.0.0.M23 through 9.0.115, from 8.5.30 through 8.5.100.\nOther, unsupported versions may also be affected\n\nUsers are recommended to upgrade to version 11.0.20, 10.1.53 or 9.0.116, which fix the issue.","exploit_maturity":"No public exploit","published":"2026-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-5739","description":"A security flaw has been discovered in PowerJob 5.1.0/5.1.1/5.1.2. The affected element is the function GroovyEvaluator.evaluate of the file /openApi/addWorkflowNode of the component OpenAPI Endpoint. The manipulation of the argument nodeParams results in code injection. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.","exploit_maturity":"No public exploit","published":"2026-04-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-5736","description":"A vulnerability was identified in PowerJob 5.1.0/5.1.1/5.1.2. Impacted is an unknown function of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/InstanceController.java of the component detailPlus Endpoint. The manipulation of the argument customQuery leads to sql injection. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.","exploit_maturity":"No public exploit","published":"2026-04-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-35583","description":"Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the configuration API endpoint (/api/configuration/{name}) validated configuration names using a blacklist approach that checked for \\, /, .., and trailing .. This could potentially be bypassed using URL-encoded variants, double-encoding, or Unicode normalization to achieve path traversal and read configuration files outside the intended directory. This vulnerability is fixed in 8.39.0.","exploit_maturity":"No public exploit","published":"2026-04-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-35571","description":"Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, Mustache navigation templates interpolated configuration-controlled link values directly into href attributes without URL scheme validation. An administrator who could modify the navItems configuration could inject javascript: URIs, enabling stored cross-site scripting (XSS) against other authenticated users viewing the Emissary web interface. This vulnerability is fixed in 8.39.0.","exploit_maturity":"No public exploit","published":"2026-04-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-33227","description":"Improper validation and restriction of a classpath path name vulnerability in \n\n Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ.\n\n\n\nIn two instances (when creating a Stomp consumer and also browsing messages in the Web console) an authenticated user provided \"key\" value could be constructed to traverse the classpath due to path concatenation. As a result, the application is exposed to a classpath path resource loading vulnerability that could potentially be chained together with another attack to lead to exploit.\n\n\n\n\n\nThis issue affects Apache ActiveMQ Client: before 5.19.3, from 6.0.0 before 6.2.2; Apache ActiveMQ Broker: before 5.19.3, from 6.0.0 before 6.2.2; Apache ActiveMQ All: before 5.19.3, from 6.0.0 before 6.2.2; Apache ActiveMQ Web: before 5.19.3, from 6.0.0 before 6.2.2; Apache ActiveMQ: before 5.19.3, from 6.0.0 before 6.2.2.\n\nUsers are recommended to upgrade to version 5.19.4 or 6.2.3, which fixes the issue. Note: 5.19.3 and 6.2.2 also fix this issue, but that is limited to non-Windows environments due to a path separator resolution bug fixed in 5.19.4 and 6.2.3.","exploit_maturity":"No public exploit","published":"2026-04-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-32588","description":"Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes.\nUsers are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue.","exploit_maturity":"No public exploit","published":"2026-04-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-27315","description":"Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from previously executed cqlsh command via  ~/.cassandra/cqlsh_history local file access.\n\nUsers are recommended to upgrade to version 4.0.20, which fixes this issue.\n\n--\nDescription: Cassandra's command-line tool, cqlsh, provides a command history feature that allows users to recall previously executed commands using the up/down arrow keys. These history records are saved in the ~/.cassandra/cqlsh_history file in the user's home directory.\n\nHowever, cqlsh does not redact sensitive information when saving command history. This means that if a user executes operations involving passwords (such as logging in or creating users) within cqlsh, these passwords are permanently stored in cleartext in the history file on the disk.","exploit_maturity":"No public exploit","published":"2026-04-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-37977","description":"A flaw was found in Keycloak. A remote attacker can exploit a Cross-Origin Resource Sharing (CORS) header injection vulnerability in Keycloak's User-Managed Access (UMA) token endpoint. This flaw occurs because the `azp` claim from a client-supplied JSON Web Token (JWT) is used to set the `Access-Control-Allow-Origin` header before the JWT signature is validated. When a specially crafted JWT with an attacker-controlled `azp` value is processed, this value is reflected as the CORS origin, even if the grant is later rejected. This can lead to the exposure of low-sensitivity information from authorization server error responses, weakening origin isolation, but only when a target client is misconfigured with `webOrigins: [\"*\"]`.","exploit_maturity":"No public exploit","published":"2026-04-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-4325","description":"A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an attacker to delete arbitrary single-use entries, which can enable the replay of consumed action tokens, such as password reset links. This could lead to unauthorized access or account compromise.","exploit_maturity":"No public exploit","published":"2026-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-34360","description":"HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, the /loadIG HTTP endpoint in the FHIR Validator HTTP service accepts a user-supplied URL via JSON body and makes server-side HTTP requests to it without any hostname, scheme, or domain validation. An unauthenticated attacker with network access to the validator can probe internal network services, cloud metadata endpoints, and map network topology through error-based information leakage. With explore=true (the default for this code path), each request triggers multiple outbound HTTP calls, amplifying reconnaissance capability. This issue has been patched in version 6.9.4.","exploit_maturity":"Proof of concept only","published":"2026-03-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-34237","description":"MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to versions 0.83.0, 1.0.1, and 1.1.1, there is a hardcoded wildcard CORS vulnerability. This issue has been patched in versions 0.83.0, 1.0.1, and 1.1.1.","exploit_maturity":"No public exploit","published":"2026-03-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-3190","description":"A flaw was found in Keycloak. The User-Managed Access (UMA) 2.0 Protection API endpoint for permission tickets fails to enforce the `uma_protection` role check. This allows any authenticated user with a token issued for a resource server client, even without the `uma_protection` role, to enumerate all permission tickets in the system. This vulnerability partial leads to information disclosure.","exploit_maturity":"No public exploit","published":"2026-03-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-1561","description":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF). This may allow remote attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.","exploit_maturity":"No public exploit","published":"2026-03-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-32948","description":"sbt is a build tool for Scala, Java, and others. From version 0.9.5 to before version 1.12.7, on Windows, sbt uses Process(\"cmd\", \"/c\", ...) to run VCS commands (git, hg, svn). The URI fragment (branch, tag, revision) is user-controlled via the build definition and passed to these commands without validation. Because cmd /c interprets \u0026, |, and ; as command separators, a malicious fragment can execute arbitrary commands. This issue has been patched in version 1.12.7.","exploit_maturity":"Proof of concept only","published":"2026-03-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-4628","description":"A flaw was found in Keycloak. An improper Access Control vulnerability in Keycloak’s User-Managed Access (UMA) resource_set endpoint allows attackers with valid credentials to bypass the allowRemoteResourceManagement=false restriction. This occurs due to incomplete enforcement of access control checks on PUT operations to the resource_set endpoint. This issue enables unauthorized modification of protected resources, impacting data integrity.","exploit_maturity":"No public exploit","published":"2026-03-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-22737","description":"Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of content from files outside the configured locations for script template views. This issue affects Spring Framework: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46.","exploit_maturity":"No public exploit","published":"2026-03-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-4366","description":"A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests. This behavior allows an attacker to trick the server into making unintended requests to internal or restricted resources. As a result, sensitive internal services such as cloud metadata endpoints could be accessed. This issue may lead to information disclosure and enable attackers to map internal network infrastructure.","exploit_maturity":"No public exploit","published":"2026-03-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-33004","description":"Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2026-03-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-33003","description":"Jenkins LoadNinja Plugin 2.1 and earlier stores LoadNinja API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2026-03-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-2575","description":"A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service (DoS) by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limits during DEFLATE decompression, leading to an OutOfMemoryError (OOM) and subsequent process termination. This vulnerability allows an attacker to disrupt the availability of the service.","exploit_maturity":"No public exploit","published":"2026-03-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-66249","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Livy.\n\nThis issue affects Apache Livy: from 0.3.0 before 0.9.0.\n\nThe vulnerability can only be exploited with non-default Apache Livy Server settings. If the configuration value \"livy.file.local-dir-whitelist\" is set to a non-default value, the directory checking can be bypassed.\n\nUsers are recommended to upgrade to version 0.9.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-03-13","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-60012","description":"Malicious configuration can lead to unauthorized file access in Apache Livy.\n\nThis issue affects Apache Livy 0.7.0 and 0.8.0 when connecting to Apache Spark 3.1 or later.\n\nA request that includes a Spark configuration value supported from Apache Spark version 3.1 can lead to users gaining access to files they do not have permissions to.\n\nFor the vulnerability to be exploitable, the user needs to have access to Apache Livy's REST or JDBC interface and be able to send requests with arbitrary Spark configuration values.\n\nUsers are recommended to upgrade to version 0.9.0 or later, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-03-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-3429","description":"A flaw was identified in the Account REST API of Keycloak that allows a user authenticated at a lower security level to perform sensitive actions intended only for higher-assurance sessions. Specifically, an attacker who has already obtained a victim’s password can delete the victim’s registered MFA/OTP credential without first proving possession of that factor. The attacker can then register their own MFA device, effectively taking full control of the account. This weakness undermines the intended protection provided by multi-factor authentication.","exploit_maturity":"No public exploit","published":"2026-03-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-2742","description":"An authentication bypass vulnerability exists in Vaadin 14.0.0 through 14.14.0, 23.0.0 through 23.6.6, 24.0.0 through 24.9.7 and 25.0.0 through 25.0.1, applications using Spring Security due to inconsistent path pattern matching of reserved framework paths.\n\nAccessing the /VAADIN endpoint without a trailing slash bypasses security filters, and allowing unauthenticated users to trigger framework initialization and create sessions without proper authorization.\n\nUsers of affected versions using Spring Security should upgrade as follows: 14.0.0-14.14.0 upgrade to 14.14.1, 23.0.0-23.6.6 to 23.6.7, 24.0.0 - 24.9.7 to 24.9.8, and 25.0.0-25.0.1 upgrade to 25.0.2 or newer.\n\nPlease note that Vaadin versions 10-13 and 15-22 are no longer supported and you should update either to the latest 14, 23, 24, 25 version.","exploit_maturity":"No public exploit","published":"2026-03-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-23907","description":"This issue affects the \nExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6.\n\n\nThe ExtractEmbeddedFiles example contains a path traversal vulnerability (CWE-22) because \nthe filename that is obtained from \nPDComplexFileSpecification.getFilename() is appended to the extraction path.\n\nUsers who have copied this example into their production code should \nreview it to ensure that the extraction path is acceptable. The example \nhas been changed accordingly, now the initial path and the extraction \npaths are converted into canonical paths and it is verified that \nextraction path contains the initial path. The documentation has also \nbeen adjusted.","exploit_maturity":"No public exploit","published":"2026-03-10","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-22723","description":"Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfoundry Deployment v48.7.0 to v54.10.0.","exploit_maturity":"No public exploit","published":"2026-03-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-11143","description":"The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list may interpret the URIs differently from one that generates a response. At the very least, differential parsing may divulge implementation details.","exploit_maturity":"No public exploit","published":"2026-03-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-59060","description":"Hostname verification bypass issue in Apache Ranger NiFiRegistryClient is reported in Apache Ranger versions \u003c= 2.7.0.\n\nUsers are recommended to upgrade to version 2.8.0, which fixes this issue.","exploit_maturity":"No public exploit","published":"2026-03-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-28338","description":"PMD is an extensible multilanguage static code analyzer. Prior to version 7.22.0, PMD's `vbhtml` and `yahtml` report formats insert rule violation messages into HTML output without escaping. When PMD analyzes untrusted source code containing crafted string literals, the generated HTML report contains executable JavaScript that runs when opened in a browser. Practical impact is limited because `vbhtml` and `yahtml` are legacy formats rarely used in practice. The default `html` format is properly escaped and not affected. Version 7.22.0 contains a fix for the issue.","exploit_maturity":"Proof of concept only","published":"2026-02-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-0871","description":"A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the \"Only administrators can view\" setting for unmanaged attributes, allowing them to modify these attributes. This improper access control can lead to unauthorized changes to user profiles, even when the system is configured to restrict such modifications.","exploit_maturity":"No public exploit","published":"2026-02-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-28208","description":"Junrar is an open source java RAR archive library. Prior to version 7.5.8, a backslash path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content anywhere on the filesystem when a crafted RAR archive is extracted on Linux/Unix. This can often lead to remote code execution (e.g., overwriting shell profiles, source code, cron jobs, etc). Version 7.5.8 has a fix for the issue.","exploit_maturity":"Proof of concept only","published":"2026-02-26","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-2817","description":"Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location. On shared hosts, a local user with basic privileges can access another user’s extracted snapshot contents, leading to unintended exposure of cache data.","exploit_maturity":"No public exploit","published":"2026-02-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-27100","description":"Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name.","exploit_maturity":"No public exploit","published":"2026-02-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-24733","description":"Improper Input Validation vulnerability in Apache Tomcat.\n\n\nTomcat did not limit HTTP/0.9 requests to the GET method. If a security \nconstraint was configured to allow HEAD requests to a URI but deny GET \nrequests, the user could bypass that constraint on GET requests by \nsending a (specification invalid) HEAD request using HTTP/0.9.\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49, from 9.0.0.M1 through 9.0.112.\n\n\nOlder, EOL versions are also affected.\n\nUsers are recommended to upgrade to version 11.0.15 or later, 10.1.50 or later or 9.0.113 or later, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-02-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-13333","description":"IBM WebSphere Application Server 9.0, and 8.5 could provide weaker than expected security during system administration of security settings.","exploit_maturity":"No public exploit","published":"2026-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-26000","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.9.0, 17.4.6, and 16.10.13, it's possible using comments to inject CSS that would transform the full wiki in a link area leading to a malicious page. This vulnerability is fixed in 17.9.0, 17.4.6, and 16.10.13.","exploit_maturity":"No public exploit","published":"2026-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-11537","description":"A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre-defined 'long' pattern), sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract these credentials (e.g., bearer tokens, session cookies) and use them to impersonate users, leading to a full account compromise.","exploit_maturity":"No public exploit","published":"2026-02-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-23903","description":"Authentication Bypass by Alternate Name vulnerability in Apache Shiro.\n\nThis issue affects Apache Shiro: before 2.0.7.\n\nUsers are recommended to upgrade to version 2.0.7, which fixes the issue.\n\nThe issue only effects static files. If static files are served from a case-insensitive filesystem,\nsuch as default macOS setup, static files may be accessed by varying the case of the filename in the request.\nIf only lower-case (common default) filters are present in Shiro, they may be bypassed this way.\n\nShiro 2.1.0 and later has a new parameters to remediate this issue\nshiro.ini: filterChainResolver.caseInsensitive = true\napplication.properties: shiro.caseInsensitive=true\n\nShiro 3.0.0 and later makes this the default in shiro.ini-based configurations.\nShiro 3.0.1 and later makes this the default in all configurations, including programmatic and Spring / Spring Boot.","exploit_maturity":"No public exploit","published":"2026-02-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-14778","description":"A flaw was found in Keycloak. A significant Broken Access Control vulnerability exists in the UserManagedPermissionService (UMA Protection API). When updating or deleting a UMA policy associated with multiple resources, the authorization check only verifies the caller's ownership against the first resource in the policy's list. This allows a user (Owner A) who owns one resource (RA) to update a shared policy and modify authorization rules for other resources (e.g., RB) in that same policy, even if those other resources are owned by a different user (Owner B). This constitutes a horizontal privilege escalation.","exploit_maturity":"No public exploit","published":"2026-02-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-1622","description":"Neo4j Enterprise and Community editions versions prior to 2026.01.3 and 5.26.21 are vulnerable to a potential information disclosure by a user who has ability to access the local log files.\n\n\nThe \"obfuscate_literals\" option in the query logs does not redact error information, exposing unredacted data in the query log when a customer writes a query that fails. It can allow a user with legitimate access to the local log files to obtain information they are not authorised to see. If this user is also in a position to run queries and trigger errors, this vulnerability can potentially help them to infer information they are not authorised to see through their intended database access.\n\nWe recommend upgrading to versions 2026.01.3 (or 5.26.21) where the issue is fixed, and reviewing query log files permissions to ensure restricted access. If your configuration had db.logs.query.obfuscate_literals enabled, and you wish the obfuscation to cover the error messages as well, you need to enable the new configuration setting db.logs.query.obfuscate_errors once you have upgraded Neo4j.","exploit_maturity":"No public exploit","published":"2026-02-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-23795","description":"Improper Restriction of XML External Entity Reference vulnerability in Apache Syncope Console.\nAn administrator with adequate entitlements to create or edit Keymaster parameters via Console can construct malicious XML text to launch an XXE attack, thereby causing sensitive data leakage occurs.\n\nThis issue affects Apache Syncope: from 3.0 through 3.0.15, from 4.0 through 4.0.3.\n\nUsers are recommended to upgrade to version 3.0.16 / 4.0.4, which fix this issue.","exploit_maturity":"No public exploit","published":"2026-02-03","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-23794","description":"Reflected XSS in Apache Syncope's Enduser Login page.\nAn attacker that tricks a legitimate user into clicking a malicious link and logging in to Syncope Enduser could steal that user's credentials.\n\nThis issue affects Apache Syncope: from 3.0 through 3.0.15, from 4.0 through 4.0.3.\n\nUsers are recommended to upgrade to version 3.0.16 / 4.0.4, which fix this issue.","exploit_maturity":"No public exploit","published":"2026-02-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-1770","description":"Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass sandbox restrictions and obtain RCE (Remote Code Execution).","exploit_maturity":"No public exploit","published":"2026-02-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-24819","description":"Improperly Controlled Sequential Memory Allocation vulnerability in foxinmy weixin4j (weixin4j-base/src/main/java/com/foxinmy/weixin4j/util modules). This vulnerability is associated with program files CharArrayBuffer.Java, ClassUtil.Java.\n\nThis issue affects weixin4j.","exploit_maturity":"No public exploit","published":"2026-01-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-24807","description":"Improper Verification of Cryptographic Signature vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/util modules). This vulnerability is associated with program files SeekableOutputStream.Java.\n\nThis issue affects quick-media: before v1.0.","exploit_maturity":"No public exploit","published":"2026-01-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-24806","description":"Improper Control of Generation of Code ('Code Injection') vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png modules). This vulnerability is associated with program files PNGImageEncoder.Java.\n\nThis issue affects quick-media: before v1.0.","exploit_maturity":"No public exploit","published":"2026-01-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-24802","description":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in briandilley jsonrpc4j (src/main/java/com/googlecode/jsonrpc4j modules). This vulnerability is associated with program files NoCloseOutputStream.Java.\n\nThis issue affects jsonrpc4j: through 1.6.0.","exploit_maturity":"No public exploit","published":"2026-01-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-14969","description":"A flaw was found in Hibernate Reactive. When an HTTP endpoint is exposed to perform database operations, a remote client can prematurely close the HTTP connection. This action may lead to leaking connections from the database connection pool, potentially causing a Denial of Service (DoS) by exhausting available database connections.","exploit_maturity":"No public exploit","published":"2026-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-24128","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 7.0-milestone-2 through 16.10.11, 17.0.0-rc-1 through 17.4.4, and 17.5.0-rc-1 through 17.7.0 contain a reflected Cross-site Scripting (XSS) vulnerability, which allows an attacker to craft a malicious URL and execute arbitrary actions with the same privileges as the victim. If the victim has administrative or programming rights, those rights can be exploited to gain full access to the XWiki installation. This issue has been patched in versions 17.8.0-rc-1, 17.4.5 and 16.10.12. To workaround, the patch can be applied manually, only a single line in templates/logging_macros.vm needs to be changed, no restart is required.","exploit_maturity":"Working exploit published","published":"2026-01-24","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-22234","description":"The fix applied in CVE-2025-22228 inadvertently broke the timing attack mitigation implemented in DaoAuthenticationProvider. This can allow attackers to infer valid usernames or other authentication behavior via response-time differences under certain configurations.","exploit_maturity":"No public exploit","published":"2026-01-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-14559","description":"A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a privileged client invokes the token exchange flow.","exploit_maturity":"No public exploit","published":"2026-01-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-21980","description":"Vulnerability in the Oracle Life Sciences Central Coding product of Oracle Health Sciences Applications (component: Platform). The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Life Sciences Central Coding. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Life Sciences Central Coding accessible data as well as unauthorized read access to a subset of Oracle Life Sciences Central Coding accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21979","description":"Vulnerability in the Oracle Planning and Budgeting Cloud Service product of Oracle Hyperion (component: EPM Agent). The supported version that is affected is 25.04.07. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Planning and Budgeting Cloud Service executes to compromise Oracle Planning and Budgeting Cloud Service. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Planning and Budgeting Cloud Service accessible data. Note: Update EPM Agent. Please refer to \u003ca href=\"https://docs.oracle.com/en/cloud/saas/enterprise-performance-management-common/diepm/epm_agent_downloading_agent_110x80569d70.html\"\u003eDownloading the EPM Agent for more information. CVSS 3.1 Base Score 4.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21978","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Relationship Pricing). Supported versions that are affected are 14.0.0.0.0-14.8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21974","description":"Vulnerability in the Oracle Life Sciences Central Designer product of Oracle Health Sciences Applications (component: Platform). The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Life Sciences Central Designer. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Life Sciences Central Designer accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21972","description":"Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Configurator accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21971","description":"Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Purchasing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise SCM Purchasing accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise SCM Purchasing accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21970","description":"Vulnerability in the Oracle Life Sciences Central Designer product of Oracle Health Sciences Applications (component: Platform). The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Life Sciences Central Designer. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Life Sciences Central Designer accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21966","description":"Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). Supported versions that are affected are 5.6.19.23, 5.6.25.17, 5.6.26.10 and 5.6.27.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality OPERA 5 Property Services, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality OPERA 5 Property Services accessible data as well as unauthorized read access to a subset of Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21961","description":"Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Company Dir / Org Chart Viewer, Employee Snapshot). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HCM Human Resources, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Human Resources accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21960","description":"Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java utils). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications DBA accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications DBA accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21959","description":"Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Workflow accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21951","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21946","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21944","description":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile Product Lifecycle Management for Process accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21943","description":"Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Scripting Admin). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Scripting, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Scripting accessible data as well as unauthorized read access to a subset of Oracle Scripting accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21938","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21934","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21933","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and 21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-21931","description":"Vulnerability in the Oracle APEX Sample Applications product of Oracle APEX (component: Brookstrut Sample App). Supported versions that are affected are 23.2.0, 23.2.1, 24.1.0, 24.2.0 and 24.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle APEX Sample Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle APEX Sample Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle APEX Sample Applications accessible data as well as unauthorized read access to a subset of Oracle APEX Sample Applications accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21925","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and 21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-21924","description":"Vulnerability in the Oracle Utilities Application Framework product of Oracle Utilities Applications (component: General). Supported versions that are affected are 4.4.0.3.0, 4.5.0.0.0, 4.5.0.1.1, 4.5.0.1.3, 4.5.0.2.0, 25.4 and 25.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Utilities Application Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Utilities Application Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Utilities Application Framework accessible data as well as unauthorized read access to a subset of Oracle Utilities Application Framework accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21923","description":"Vulnerability in the Oracle Life Sciences Central Designer product of Oracle Health Sciences Applications (component: Platform). The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Life Sciences Central Designer. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Life Sciences Central Designer accessible data as well as unauthorized read access to a subset of Oracle Life Sciences Central Designer accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-21922","description":"Vulnerability in the Oracle Planning and Budgeting Cloud Service product of Oracle Hyperion (component: EPM Agent). The supported version that is affected is 25.04.07. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Planning and Budgeting Cloud Service executes to compromise Oracle Planning and Budgeting Cloud Service. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Planning and Budgeting Cloud Service accessible data. Note: Update EPM Agent. Please refer to \u003ca href=\"https://docs.oracle.com/en/cloud/saas/enterprise-performance-management-common/diepm/epm_agent_downloading_agent_110x80569d70.html\"\u003eDownloading the EPM Agent for more information. CVSS 3.1 Base Score 4.2 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2026-1180","description":"A flaw was identified in Keycloak’s OpenID Connect Dynamic Client Registration feature when clients authenticate using private_key_jwt. The issue allows a client to specify an arbitrary jwks_uri, which Keycloak then retrieves without validating the destination. This enables attackers to coerce the Keycloak server into making HTTP requests to internal or restricted network resources. As a result, attackers can probe internal services and cloud metadata endpoints, creating an information disclosure and reconnaissance risk.","exploit_maturity":"No public exploit","published":"2026-01-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-59355","description":"A vulnerability.\n\nWhen org.apache.linkis.metadata.util.HiveUtils.decode() fails to perform Base64 decoding, it records the complete input parameter string in the log via logger.error(str + \"decode failed\", e). If the input parameter contains sensitive information such as Hive Metastore keys, plaintext passwords will be left in the log files when decoding fails, resulting in information leakage.\n\n\nAffected Scope\nComponent: Sensitive fields in hive-site.xml (e.g., javax.jdo.option.ConnectionPassword) or other fields encoded in Base64.\nVersion: Apache Linkis 1.0.0 – 1.7.0\n\n\nTrigger Conditions\nThe value of the configuration item is an invalid Base64 string.\nLog files are readable by users other than hive-site.xml administrators.\n\n\nSeverity: Low\nThe probability of Base64 decoding failure is low.\nThe leakage is only triggered when logs at the Error level are exposed.\n\nRemediation\nApache Linkis 1.8.0 and later versions have replaced the log with desensitized content.\nlogger.error(\"URL decode failed: {}\", e.getMessage()); // 不再输出 str\n\n\nUsers are recommended to upgrade to version 1.8.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2026-01-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-1050","description":"A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java of the component REST Authenticate Endpoint. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.","exploit_maturity":"Proof of concept only","published":"2026-01-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-15104","description":"Nu Html Checker (validator.nu) contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and 127.0.0.1, these controls can be bypassed using DNS rebinding techniques or domains that resolve to loopback addresses.This issue affects The Nu Html Checker (vnu): latest (commit 23f090a11bab8d0d4e698f1ffc197a4fe226a9cd).","exploit_maturity":"Proof of concept only","published":"2026-01-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-1002","description":"The Vert.x Web static handler component cache can be manipulated to deny the access to static files served by the handler using specifically crafted request URI.\n\n\nThe issue comes from an improper implementation of the C. rule of section 5.2.4 of RFC3986 and is fixed in Vert.x Core component (used by Vert.x Web): https://github.com/eclipse-vertx/vert.x/pull/5895 \n\n\n\nSteps to reproduce\nGiven a file served by the static handler, craft an URI that introduces a string like bar%2F..%2F after the last / char to deny the access to the URI with an HTTP 404 response. For example https://example.com/foo/index.html can be denied with https://example.com/foo/bar%2F..%2Findex.html\n\nMitgation\nDisabling Static Handler cache fixes the issue.\n\n\n\nStaticHandler staticHandler = StaticHandler.create().setCachingEnabled(false);","exploit_maturity":"Proof of concept only","published":"2026-01-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-66169","description":"Cypher Injection vulnerability in Apache Camel camel-neo4j component.\n\nThis issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0\n\nUsers are recommended to upgrade to version 4.10.8 for 4.10.x LTS and 4.14.3 for 4.14.x LTS and 4.17.0.","exploit_maturity":"No public exploit","published":"2026-01-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-68925","description":"Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, the code doesn't validate that the JWT header specifies \"alg\":\"RS256\". This vulnerability is fixed in 2.2.","exploit_maturity":"No public exploit","published":"2026-01-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-65090","description":"XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.6, users with the rights to view the Calendar.JSONService page (including guest users) can exploit the data leak vulnerability by accessing database info, with the exception of passwords. This issue has been patched in version 2.4.6.","exploit_maturity":"No public exploit","published":"2026-01-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-0707","description":"A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regarding the formatting of the \"Bearer\" authentication scheme. It accepts non-standard characters (such as tabs) as separators and tolerates case variations that deviate from RFC 6750 specifications.","exploit_maturity":"No public exploit","published":"2026-01-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2026-22187","description":"Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization cache files (.bfmemo) during image processing. The loci.formats.Memoizer class automatically loads and deserializes memo files associated with images without validation, integrity checks, or trust enforcement. An attacker who can supply a crafted .bfmemo file alongside an image can trigger deserialization of untrusted data, which may result in denial of service, logic manipulation, or potentially remote code execution in environments where suitable gadget chains are present on the classpath.","exploit_maturity":"Proof of concept only","published":"2026-01-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2026-22186","description":"Bio-Formats versions up to and including 8.3.0 contain an XML External Entity (XXE) vulnerability in the Leica Microsystems metadata parsing component (e.g., XLEF). The parser uses an insecurely configured DocumentBuilderFactory when processing Leica XML-based metadata files, allowing external entity expansion and external DTD loading. A crafted metadata file can trigger outbound network requests (SSRF), access local system resources where readable, or cause a denial of service during XML parsing.","exploit_maturity":"Proof of concept only","published":"2026-01-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-68280","description":"Improper Restriction of XML External Entity Reference vulnerability in Apache SIS.\n\n\n\nIt is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the following SIS services:\n\n\n\n\n * Reading of GeoTIFF files having the GEO_METADATA tag defined by the Defense Geospatial Information Working Group (DGIWG).\n\n * Parsing of ISO 19115 metadata in XML format.\n\n * Parsing of Coordinate Reference Systems defined in the GML format.\n\n * Parsing of files in GPS Exchange Format (GPX).\n\n\n\n\n\nThis issue affects Apache SIS from versions 0.4 through 1.5 inclusive. Users are recommended to upgrade to version 1.6, which will fix the issue. In the meantime, the security vulnerability can be avoided by launching Java with the javax.xml.accessExternalDTD system property sets to a comma-separated list of authorized protocols. For example:\n\n\n\njava -Djavax.xml.accessExternalDTD=\"\" ...","exploit_maturity":"No public exploit","published":"2026-01-05","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-15022","description":"Action captions in Vaadin accept HTML by default but were not sanitized, potentially allowing Cross-site Scripting (XSS) if caption content is derived from user input.\n\nIn Vaadin Framework 7 and 8, the Action class is a general-purpose class that may be used by multiple components. The fixed versions sanitize captions by default and provide an API to explicitly enable HTML content mode for backwards compatibility.\n\nIn Vaadin 23 and newer, the Action class is only used by the Spreadsheet component. The fixed versions sanitize HTML using Jsoup with a relaxed safelist.\n\nVaadin 14 is not affected as Spreadsheet component was not supported.\n\nUsers of affected versions should apply the following mitigation or upgrade. Releases that have fixed this issue include:\n\nProduct version\nVaadin 7.0.0 - 7.7.49\nVaadin 8.0.0 - 8.29.1\nVaadin 23.1.0 - 23.6.5\nVaadin 24.0.0 - 24.8.13\nVaadin 24.9.0 - 24.9.6\n\nMitigation\nUpgrade to 7.7.50\nUpgrade to 8.30.0\nUpgrade to 23.6.6\nUpgrade to 24.8.14 or 24.9.7\nUpgrade to 25.0.0 or newer\n\nArtifacts     Maven coordinatesVulnerable versionsFixed versioncom.vaadin:vaadin-server\n7.0.0 - 7.7.49\n≥7.7.50\ncom.vaadin:vaadin-server\n8.0.0 - 8.29.1\n≥8.30.0\ncom.vaadin:vaadin\n23.1.0 - 23.6.5\n≥23.6.6\ncom.vaadin:vaadin24.0.0 - 24.8.13\n≥24.8.14\ncom.vaadin:vaadin24.9.0 - 24.9.6\n≥24.9.7\ncom.vaadin:vaadin-spreadsheet-flow\n23.1.0 - 23.6.5\n≥23.6.6\ncom.vaadin:vaadin-spreadsheet-flow\n24.0.0 - 24.8.13\n≥24.8.14\ncom.vaadin:vaadin-spreadsheet-flow\n24.9.0 - 24.9.6\n≥24.9.7","exploit_maturity":"No public exploit","published":"2026-01-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-68390","description":"Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.","exploit_maturity":"No public exploit","published":"2025-12-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-68384","description":"Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) causing a persistent denial of service (OOM crash) via submission of oversized user settings data.","exploit_maturity":"No public exploit","published":"2025-12-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-68161","description":"The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the verifyHostName https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName configuration attribute or the log4j2.sslVerifyHostName https://logging.apache.org/log4j/2.x/manual/systemproperties.html#log4j2.sslVerifyHostName system property is set to true.\n\nThis issue may allow a man-in-the-middle attacker to intercept or redirect log traffic under the following conditions:\n\n * The attacker is able to intercept or redirect network traffic between the client and the log receiver.\n * The attacker can present a server certificate issued by a certification authority trusted by the Socket Appender’s configured trust store (or by the default Java trust store if no custom trust store is configured).\n\n\nUsers are advised to upgrade to Apache Log4j Core version 2.25.3, which addresses this issue.\n\nAs an alternative mitigation, the Socket Appender may be configured to use a private or restricted trust root to limit the set of trusted certificates.","exploit_maturity":"No public exploit","published":"2025-12-18","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-14763","description":"Missing cryptographic key commitment in the Amazon S3 Encryption Client for Java may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an \"instruction file\" instead of S3's metadata record.\n\n\nTo mitigate this issue, upgrade Amazon S3 Encryption Client for Java to version 4.0.0 or later.","exploit_maturity":"No public exploit","published":"2025-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-68113","description":"ALTCHA is privacy-first software for captcha and bot protection. A cryptographic semantic binding flaw in ALTCHA libraries allows challenge payload splicing, which may enable replay attacks. The HMAC signature does not unambiguously bind challenge parameters to the nonce, allowing an attacker to reinterpret a valid proof-of-work submission with a modified expiration value. This may allow previously solved challenges to be reused beyond their intended lifetime, depending on server-side replay handling and deployment assumptions. The vulnerability primarily impacts abuse-prevention mechanisms such as rate limiting and bot mitigation. It does not directly affect data confidentiality or integrity. This issue has been addressed by enforcing explicit semantic separation between challenge parameters and the nonce during HMAC computation. Users are advised to upgrade to patched versions, which include version 1.0.0 of the altcha Golang package, version 1.0.0 of the altcha Rubygem, version 1.0.0 of the altcha pip package, version 1.0.0 of the altcha Erlang package, version 1.4.1 of the altcha-lib npm package, version 1.3.1 of the altcha-org/altcha Composer package, and version 1.3.0 of the org.altcha:altcha Maven package. As a mitigation, implementations may append a delimiter to the end of the `salt` value prior to HMAC computation (for example, `\u003csalt\u003e?expires=\u003ctime\u003e\u0026`). This prevents ambiguity between parameters and the nonce and is backward-compatible with existing implementations, as the delimiter is treated as a standard URL parameter separator.","exploit_maturity":"No public exploit","published":"2025-12-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-67735","description":"Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the `io.netty.handler.codec.http.HttpRequestEncoder` has a CRLF injection with the request URI when constructing a request. This leads to request smuggling when `HttpRequestEncoder` is used without proper sanitization of the URI. Any application / framework using `HttpRequestEncoder` can be subject to be abused to perform request smuggling using CRLF injection. Versions 4.1.129.Final and 4.2.8.Final fix the issue.","exploit_maturity":"Proof of concept only","published":"2025-12-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-14777","description":"A flaw was found in Keycloak. An IDOR (Broken Access Control) vulnerability exists in the admin API endpoints for authorization resource management, specifically in ResourceSetService and PermissionTicketService. The system checks authorization against the resourceServer (client) ID provided in the API request, but the backend database lookup and modification operations (findById, delete) only use the resourceId. This mismatch allows an authenticated attacker with fine-grained admin permissions for one client (e.g., Client A) to delete or update resources belonging to another client (Client B) within the same realm by supplying a valid resource ID.","exploit_maturity":"No public exploit","published":"2025-12-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-9122","description":"Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.","exploit_maturity":"No public exploit","published":"2025-12-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-14674","description":"A vulnerability was found in aizuda snail-job up to 1.6.0. Affected by this vulnerability is the function QLExpressEngine.doEval of the file snail-job-common/snail-job-common-core/src/main/java/com/aizuda/snailjob/common/core/expression/strategy/QLExpressEngine.java. The manipulation results in injection. The attack can be launched remotely. Upgrading to version 1.7.0-beta1 addresses this issue. The patch is identified as 978f316c38b3d68bb74d2489b5e5f721f6675e86. The affected component should be upgraded.","exploit_maturity":"No public exploit","published":"2025-12-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-67721","description":"Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java. In versions 3.3 and below, incorrect handling of malformed data in Java-based decompressor implementations for Snappy and LZ4 allow remote attackers to read previous buffer contents via crafted compressed input. With certain crafted compressed inputs, elements from the output buffer can end up in the uncompressed output, potentially leaking sensitive data. This is relevant for applications that reuse the same output buffer to uncompress multiple inputs. This can be the case of a web server that allocates a fix-sized buffer for performance purposes. There is similar vulnerability in GHSA-cmp6-m4wj-q63q. This issue is fixed in version 3.4.","exploit_maturity":"No public exploit","published":"2025-12-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53960","description":"When issuing JSON Web Tokens (JWT), Apache StreamPark directly uses the user's password as the HMAC signing key (e.g., with the HS256 algorithm). An attacker can exploit this vulnerability to perform offline brute-force attacks on the user's password using a captured JWT, or to arbitrarily forge identity tokens for the user if the password is already known, ultimately leading to complete account takeover.\n\n\n\n\n\n\n\nThis issue affects Apache StreamPark: from 2.0.0 before 2.1.7.\n\nUsers are recommended to upgrade to version 2.1.7, which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-12-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-67643","description":"Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b_9517b_6b_202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspace directory.","exploit_maturity":"No public exploit","published":"2025-12-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-67642","description":"Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they are not entitled to.","exploit_maturity":"No public exploit","published":"2025-12-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-67640","description":"Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell script generated by the plugin, allowing attackers able to control the workspace directory name to inject arbitrary OS commands.","exploit_maturity":"No public exploit","published":"2025-12-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-67638","description":"Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2025-12-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-67637","description":"Jenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-12-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-67636","description":"A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views.","exploit_maturity":"No public exploit","published":"2025-12-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-66472","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 6.2-milestone-1 through 16.10.9 and 17.0.0-rc-1 through 17.4.1 of both XWiki Platform Flamingo Skin Resources and XWiki Platform Web Templates are vulnerable to a reflected XSS attack through a deletion confirmation message. The attacker-supplied script is executed when the victim clicks the \"No\" button. This issue is fixed in versions 16.10.10 and 17.4.2 of both XWiki Platform Flamingo Skin Resources and XWiki Platform Web Templates.","exploit_maturity":"Working exploit published","published":"2025-12-10","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-66033","description":"Okta Java Management SDK facilitates interactions with the Okta management API. In versions 21.0.0 through 24.0.0, specific multithreaded implementations may encounter memory issues as threads are not properly cleaned up after requests are completed. Over time, this can degrade performance and availability in long-running applications and may result in a denial-of-service condition under sustained load. In addition to using the affected versions, users may be at risk if they are implementing a long-running application using the ApiClient in a multi-threaded manner. This issue is fixed in version 24.0.1.","exploit_maturity":"No public exploit","published":"2025-12-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-12635","description":"IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.12 are affected by cross-site scripting due to improper validation of user-supplied input. An attacker could exploit this vulnerability by using a specially crafted URL to redirect the user to a malicious site.","exploit_maturity":"No public exploit","published":"2025-12-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-11222","description":"Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URLs, potentially facilitating phishing attacks and credential theft.","exploit_maturity":"No public exploit","published":"2025-12-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-66453","description":"Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed() function, it might lead to high CPU consumption and a potential Denial of Service. Small numbers go through this call stack: NativeNumber.numTo \u003e DToA.JS_dtostr \u003e DToA.JS_dtoa \u003e DToA.pow5mult where pow5mult attempts to raise 5 to a ridiculous power. This vulnerability is fixed in 1.8.1, 1.7.15.1, and 1.7.14.1.","exploit_maturity":"No public exploit","published":"2025-12-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-13472","description":"A fix was made in BlazeMeter Jenkins Plugin version 4.27 to allow users only with certain permissions to see the list of available resources like credential IDs, bzm workspaces and bzm project Ids. Prior to this fix, anyone could see this list as a dropdown on the Jenkins UI.","exploit_maturity":"No public exploit","published":"2025-12-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-13806","description":"A security vulnerability has been detected in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This impacts an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Transaction API. The manipulation of the argument from/to/wei leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.","exploit_maturity":"Proof of concept only","published":"2025-12-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-54057","description":"Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking.\n\nThis issue affects Apache SkyWalking: \u003c= 10.2.0.\n\nUsers are recommended to upgrade to version 10.3.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-11-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62728","description":"SQL injection vulnerability in Hive Metastore Server (HMS) when processing delete column statistics requests via the Thrift APIs. The vulnerability is only exploitable by trusted/authorized users/applications that are allowed to call directly the Thrift APIs. In most real-world deployments, HMS is accessible to only a handful of applications (e.g., Hiveserver2) thus the vulnerability is not exploitable. Moreover, the vulnerable code cannot be reached when metastore.try.direct.sql property is set to false.\n\nThis issue affects Apache Hive: from 4.1.0 before 4.2.0.\n\nUsers are recommended to upgrade to version 4.2.0, which fixes the issue. Users who cannot upgrade directly are encouraged to set metastore.try.direct.sql property to false if the HMS Thrift APIs are exposed to general public.","exploit_maturity":"No public exploit","published":"2025-11-26","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-21621","description":"GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.25.0, a reflected cross-site scripting (XSS) vulnerability exists in the WMS GetFeatureInfo HTML output format that enables a remote attacker to execute arbitrary JavaScript code in a victim's browser through specially crafted SLD_BODY parameters. This issue has been patched in version 2.25.0.","exploit_maturity":"No public exploit","published":"2025-11-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-13467","description":"A flaw was found in the Keycloak LDAP User Federation provider. This vulnerability allows an authenticated realm administrator to trigger deserialization of untrusted Java objects via a malicious LDAP server configuration.","exploit_maturity":"No public exploit","published":"2025-11-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-65089","description":"XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to version 1.27.0, a user with no view rights on a page may see the content of an office attachment displayed with the view file macro. This issue has been patched in version 1.27.0.","exploit_maturity":"Proof of concept only","published":"2025-11-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64408","description":"Apache Causeway faces Java deserialization vulnerabilities that allow remote code execution (RCE) through user-controllable URL parameters. These vulnerabilities affect all applications using Causeway's ViewModel functionality and can be exploited by authenticated attackers to execute arbitrary code with application privileges. \n\nThis issue affects all current versions.\n\nUsers are recommended to upgrade to version 3.5.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-11-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-54990","description":"XWiki AdminTools integrates administrative tools for managing a running XWiki instance. Prior to version 1.1, users without admin rights have access to AdminTools.SpammedPages. View rights are not restricted only to admin users for AdminTools.SpammedPages. While no data is visible to non admin users, the page is still accessible. This issue has been patched in version 1.1. A workaround involves setting the view rights for the AdminTools space to be only available for the XWikiAdminGroup.","exploit_maturity":"No public exploit","published":"2025-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-13266","description":"A security vulnerability has been detected in wwwlike vlife up to 2.0.1. This issue affects the function create of the file vlife-base/src/main/java/cn/wwwlike/sys/api/SysFileApi.java of the component VLifeApi. Such manipulation of the argument fileName leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.","exploit_maturity":"Proof of concept only","published":"2025-11-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-13265","description":"A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. This manipulation causes path traversal. It is possible to initiate the attack remotely.","exploit_maturity":"Proof of concept only","published":"2025-11-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-13262","description":"A vulnerability was determined in lsfusion platform up to 6.1. Affected by this vulnerability is the function UploadFileRequestHandler of the file platform/web-client/src/main/java/lsfusion/http/controller/file/UploadFileRequestHandler.java. Executing manipulation of the argument sid can lead to path traversal. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.","exploit_maturity":"Proof of concept only","published":"2025-11-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-13261","description":"A vulnerability was found in lsfusion platform up to 6.1. Affected is the function DownloadFileRequestHandler of the file web-client/src/main/java/lsfusion/http/controller/file/DownloadFileRequestHandler.java. Performing manipulation of the argument Version results in path traversal. Remote exploitation of the attack is possible. The exploit has been made public and could be used.","exploit_maturity":"Proof of concept only","published":"2025-11-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-11538","description":"A vulnerability exists in Keycloak's server distribution where enabling debug mode (--debug \u003cport\u003e) insecurely defaults to binding the Java Debug Wire Protocol (JDWP) port to all network interfaces (0.0.0.0). This exposes the debug port to the local network, allowing an attacker on the same network segment to attach a remote debugger and achieve remote code execution within the Keycloak Java virtual machine.","exploit_maturity":"No public exploit","published":"2025-11-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-10853","description":"A reflected cross-site scripting (XSS) vulnerability exists in the management console of multiple WSO2 products due to improper output encoding. By tampering with specific parameters, a malicious actor can inject arbitrary JavaScript into the response, leading to reflected XSS.\n\nSuccessful exploitation could result in UI manipulation, redirection to malicious websites, or data theft from the browser. However, session-related sensitive cookies are protected with the httpOnly flag, which mitigates the risk of session hijacking.","exploit_maturity":"No public exploit","published":"2025-11-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-62276","description":"The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions uses an incorrect cache-control header, which allows local users to obtain access to downloaded files via the browser's cache.","exploit_maturity":"No public exploit","published":"2025-11-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62275","description":"Blogs in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions does not check permission of images in a blog entry, which allows remote attackers to view the images in a blog entry via crafted URL.","exploit_maturity":"No public exploit","published":"2025-11-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62267","description":"Multiple cross-site scripting (XSS) vulnerabilities in web content template’s select structure page in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 update 35 through update 92 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a user’s (1) First Name, (2) Middle Name, or (3) Last Name text field.","exploit_maturity":"No public exploit","published":"2025-10-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62264","description":"Reflected cross-site scripting (XSS) vulnerability in Languauge Override in Liferay Portal 7.4.3.8 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, and 7.4 update 4 through update 92 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_portal_language_override_web_internal_portlet_PLOPortlet_selectedLanguageId` parameter.","exploit_maturity":"No public exploit","published":"2025-10-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62266","description":"By default, Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions is vulnerable to DNS rebinding attacks, which allows remote attackers to redirect users to arbitrary external URLs. This vulnerability can be mitigated by changing the redirect URL security from IP to domain.","exploit_maturity":"No public exploit","published":"2025-10-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62265","description":"Cross-site scripting (XSS) vulnerability in the Blogs widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 36, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via a crafted \u003ciframe\u003e injected into a blog entry's “Content” text field \n\nThe Blogs widget in Liferay DXP does not add the sandbox attribute to \u003ciframe\u003e elements, which allows remote attackers to access the parent page via scripts and links in the frame page.","exploit_maturity":"No public exploit","published":"2025-10-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62257","description":"Password enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows remote attackers to determine a user’s password even if account lockout is enabled via brute force attack.","exploit_maturity":"No public exploit","published":"2025-10-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64150","description":"A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64149","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64148","description":"A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64147","description":"Jenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64146","description":"Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64145","description":"Jenkins ByteGuard Build Actions Plugin 1.0 does not mask API tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64144","description":"Jenkins ByteGuard Build Actions Plugin 1.0 stores API tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64143","description":"Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64142","description":"A missing permission check in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64141","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64139","description":"A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64138","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64137","description":"A missing permission check in Jenkins Themis Plugin 1.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64136","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-specified HTTP server.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64135","description":"Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb_8 and earlier sets the Java system property `jdk.http.auth.tunneling.disabledSchemes` to an empty value, disabling a protection mechanism of the Java runtime.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64133","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Extensible Choice Parameter Plugin 239.v5f5c278708cf and earlier allows attackers to execute sandboxed Groovy code.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-64132","description":"Jenkins MCP Server Plugin 0.84.v50ca_24ef83f2 and earlier does not perform permission checks in multiple MCP tools, allowing attackers to trigger builds and obtain information about job and cloud configuration they should not be able to access.","exploit_maturity":"No public exploit","published":"2025-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-12390","description":"A flaw was found in Keycloak. In Keycloak where a user can accidentally get access to another user's session if both use the same device and browser. This happens because Keycloak sometimes reuses session identifiers and doesn’t clean up properly during logout when browser cookies are missing. As a result, one user may receive tokens that belong to another user.","exploit_maturity":"No public exploit","published":"2025-10-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62784","description":"InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved in version 1.6.5.","exploit_maturity":"No public exploit","published":"2025-10-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62783","description":"InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.1-SNAPSHOT and earlier contain a vulnerability where any plugin using the `GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved in version 1.6.2-SNAPSHOT.","exploit_maturity":"No public exploit","published":"2025-10-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62782","description":"InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain a vulnerability where GUIs using GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved in version 1.6.4-SNAPSHOT.","exploit_maturity":"No public exploit","published":"2025-10-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62263","description":"Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.7 through 7.4.3.103, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 service pack 3 through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an Account Role’s “Title” text field to (1) view account role page, or (2) select account role page.\n\nMultiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.7 through 7.4.3.103, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 service pack 3 through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an Organization’s “Name” text field to (1) view account page, (2) view account organization page, or (3) select account organization page.","exploit_maturity":"No public exploit","published":"2025-10-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62262","description":"Information exposure through log file vulnerability in LDAP import feature in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows local users to view user email address in the log files.","exploit_maturity":"No public exploit","published":"2025-10-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62261","description":"Liferay Portal 7.4.0 through 7.4.3.99, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 34, and older unsupported versions stores password reset tokens in plain text, which allows attackers with access to the database to obtain the token, reset a user’s password and take over the user’s account.","exploit_maturity":"No public exploit","published":"2025-10-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62259","description":"Liferay Portal 7.4.0 through 7.4.3.109, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit access to APIs before a user has verified their email address, which allows remote users to access and edit content via the API.","exploit_maturity":"No public exploit","published":"2025-10-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62253","description":"Open redirect vulnerability in page administration in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect parameter.","exploit_maturity":"No public exploit","published":"2025-10-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-61795","description":"Improper Resource Shutdown or Release vulnerability in Apache Tomcat.\n\nIf an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage collection process to delete. Depending on JVM settings, application memory usage and application load, it was possible that space for the temporary copies of uploaded parts would be filled faster than GC cleared it, leading to a DoS.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.11, from 10.1.0-M1 through 10.1.46, from 9.0.0.M1 through 9.0.109.\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.\nUsers are recommended to upgrade to version 11.0.12 or later, 10.1.47 or later or 9.0.110 or later which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-10-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-5605","description":"An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. A malicious actor with access to the console can manipulate the request URI to bypass authentication and access certain restricted resources, resulting in partial information disclosure.\n\nThe known exposure from this issue is limited to memory statistics. While the vulnerability does not allow full account compromise, it still enables unauthorized access to internal system details.","exploit_maturity":"Working exploit published","published":"2025-10-24","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-5350","description":"SSRF and Reflected XSS Vulnerabilities exist in multiple WSO2 products within the deprecated Try-It feature, which was accessible only to administrative users. This feature accepted user-supplied URLs without proper validation, leading to server-side request forgery (SSRF). Additionally, the retrieved content was directly reflected in the HTTP response, enabling reflected cross-site scripting (XSS) in the admin user's browser context.\n\nBy tricking an administrator into accessing a crafted link, an attacker could force the server to fetch malicious content and reflect it into the admin’s browser, leading to arbitrary JavaScript execution for UI manipulation or data exfiltration. While session cookies are protected with the HttpOnly flag, the XSS still poses a significant security risk.\n\nFurthermore, SSRF can be used by a privileged user to query internal services, potentially aiding in internal network enumeration if the target endpoints are reachable from the affected product.","exploit_maturity":"Working exploit published","published":"2025-10-24","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-12194","description":"Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCFB.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeGCM.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/SHA256NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeEngine.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCBC.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCTR.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCFB.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCM.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeEngine.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCBC.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCMSIV.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCCM.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCTR.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA256NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA224NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA3NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHAKENativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA512NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA384NativeDigest.Java.\n\nThis issue affects Bouncy Castle for Java FIPS: from 2.1.0 through 2.1.1; Bouncy Castle for Java LTS: from 2.73.0 through 2.73.7.","exploit_maturity":"No public exploit","published":"2025-10-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62256","description":"Liferay Portal 7.4.0 through 7.4.3.109, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.7, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not properly restrict access to OpenAPI in certain circumstances, which allows remote attackers to access the OpenAPI YAML file via a crafted URL.","exploit_maturity":"No public exploit","published":"2025-10-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62254","description":"The ComboServlet in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit the number or size of the files it will combine, which allows remote attackers to create very large responses that lead to a denial of service attack via the URL query string.","exploit_maturity":"No public exploit","published":"2025-10-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-60837","description":"A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload.","exploit_maturity":"No public exploit","published":"2025-10-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-12110","description":"A flaw was found in Keycloak. An offline session continues to be valid when the offline_access scope is removed from the client. The refresh token is accepted and you can continue to request new tokens for the session. As it can lead to a situation where an administrator removes the scope, and assumes that offline sessions are no longer available, but they are.","exploit_maturity":"No public exploit","published":"2025-10-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-11429","description":"A flaw was found in Keycloak. Keycloak does not immediately enforce the disabling of the \"Remember Me\" realm setting on existing user sessions. Sessions created while \"Remember Me\" was active retain their extended session lifetime until they expire, overriding the administrator's recent security configuration change. This is a logic flaw in session management increases the potential window for successful session hijacking or unauthorized long-term access persistence. The flaw lies in the session expiration logic relying on the session-local \"remember-me\" flag without validating the current realm-level configuration.","exploit_maturity":"No public exploit","published":"2025-10-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62710","description":"Sakai is a Collaboration and Learning Environment. Prior to versions 23.5 and 25.0, EncryptionUtilityServiceImpl initialized an AES256TextEncryptor password (serverSecretKey) using RandomStringUtils with the default java.util.Random. java.util.Random is a non‑cryptographic PRNG and can be predicted from limited state/seed information (e.g., start time window), substantially reducing the effective search space of the generated key. An attacker who can obtain ciphertexts (e.g., exported or at‑rest strings protected by this service) and approximate the PRNG seed can feasibly reconstruct the serverSecretKey and decrypt affected data. SAK-49866 is patched in Sakai 23.5, 25.0, and trunk.","exploit_maturity":"No public exploit","published":"2025-10-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62248","description":"A reflected cross-site scripting (XSS) vulnerability, resulting from a regression, has been identified in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19 allows a remote, authenticated attacker to inject and execute JavaScript code via the _com_liferay_dynamic_data_mapping_web_portlet_DDMPortlet_definition parameter. The malicious payload is executed within the victim's browser when they access a URL that includes the crafted parameter.","exploit_maturity":"No public exploit","published":"2025-10-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-11965","description":"In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories, allowing unauthorized users to retrieve files within them (e.g. '.git/config').","exploit_maturity":"Proof of concept only","published":"2025-10-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62288","description":"Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: Logger). Supported versions that are affected are 3.4.0.1.3 and 3.4.1.0.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Health Sciences Data Management Workbench. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Health Sciences Data Management Workbench accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-62287","description":"Vulnerability in the Oracle Life Sciences InForm product of Oracle Health Sciences Applications (component: Web Server). The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Life Sciences InForm. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Life Sciences InForm, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Life Sciences InForm accessible data as well as unauthorized read access to a subset of Oracle Life Sciences InForm accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-62250","description":"Improper Authentication in Liferay Portal 7.4.0 through 7.4.3.132, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to send malicious data to the Liferay Portal 7.4.0 through 7.4.3.132, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions that will treat it as trusted data via unauthenticated cluster messages.","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62249","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q3.0 through 2025.Q3.2, 2025.Q2.0 through 2025.Q2.12, 2025.Q1.0 through 2025.Q1.17, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.20, and 2023.Q4.0 through 2023.Q4.10 allows an remote non-authenticated attacker to inject JavaScript into the google_gadget.","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-61885","description":"Vulnerability in the Oracle Life Sciences InForm product of Oracle Health Sciences Applications (component: Web Server). The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Life Sciences InForm. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Life Sciences InForm accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-61762","description":"Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Payables). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Payables. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN Payables accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise FIN Payables accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise FIN Payables. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-61761","description":"Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Maintenance Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN Maintenance Management accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise FIN Maintenance Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-61758","description":"Vulnerability in the PeopleSoft Enterprise FIN IT Asset Management product of Oracle PeopleSoft (component: IT Asset Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN IT Asset Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN IT Asset Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-61754","description":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 7.6.0.0.0 and 8.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-61753","description":"Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Scripting, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Scripting accessible data as well as unauthorized read access to a subset of Oracle Scripting accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-61750","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53071","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Upload Attachments). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53065","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53064","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53063","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53061","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53060","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.9.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53059","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53058","description":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Application Logging Interfaces). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Manager accessible data as well as unauthorized read access to a subset of Oracle Applications Manager accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53056","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Environment Tech). Supported versions that are affected are 9.2.0.0-9.2.9.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53055","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53052","description":"Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Workflow, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Workflow accessible data as well as unauthorized read access to a subset of Oracle Workflow accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53048","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53041","description":"Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.5-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iStore accessible data as well as unauthorized read access to a subset of Oracle iStore accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53035","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53034","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-50075","description":"Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Security Management System). Supported versions that are affected are 2.9.0.0.0-7.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Revenue Management and Billing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Revenue Management and Billing accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-50074","description":"Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Security Management System). Supported versions that are affected are 2.9.0.0.0-7.2.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Financial Services Revenue Management and Billing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Revenue Management and Billing accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-34281","description":"ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the \"Image Gallery\", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.","exploit_maturity":"No public exploit","published":"2025-10-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-11849","description":"Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth before 1.11.0; versions of the package org.zwobble.mammoth:mammoth before 1.11.0 are vulnerable to Directory Traversal due to the lack of path or file type validation when processing a docx file containing an image with an external link (r:link attribute instead of embedded r:embed). The library resolves the URI to a file path and after reading, the content is encoded as base64 and included in the HTML output as a data URI. An attacker can read arbitrary files on the system where the conversion is performed or cause an excessive resources consumption by crafting a docx file that links to special device files such as /dev/random or /dev/zero.","exploit_maturity":"Proof of concept only","published":"2025-10-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-31573","description":"XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.","exploit_maturity":"Proof of concept only","published":"2025-10-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-9955","description":"An improper access control vulnerability exists in WSO2 Enterprise Integrator product due to insufficient permission restrictions on internal SOAP admin services related to system logs and user-store configuration. A low-privileged user can access log data and user-store configuration details that are not intended to be exposed at that privilege level.\n\nWhile no credentials or sensitive user information are exposed, this vulnerability may allow unauthorized visibility into internal operational details, which could aid in further exploitation or reconnaissance.","exploit_maturity":"No public exploit","published":"2025-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-41254","description":"STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized messages.\n\nAffected Spring Products and VersionsSpring Framework:\n\n * 6.2.0 - 6.2.11\n * 6.1.0 - 6.1.23\n * 6.0.x - 6.0.29\n * 5.3.0 - 5.3.45\n * Older, unsupported versions are also affected.\n\n\nMitigationUsers of affected versions should upgrade to the corresponding fixed version.\n\nAffected version(s)Fix versionAvailability6.2.x6.2.12OSS6.1.x6.1.24 Commercial https://enterprise.spring.io/ 6.0.xN/A Out of support https://spring.io/projects/spring-framework#support 5.3.x5.3.46 Commercial https://enterprise.spring.io/ No further mitigation steps are necessary.\n\nCreditThis vulnerability was discovered and responsibly reported by Jannis Kaiser.","exploit_maturity":"No public exploit","published":"2025-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-59419","description":"Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.128.Final and 4.2.7.Final, the SMTP codec in Netty contains an SMTP command injection vulnerability due to insufficient input validation for Carriage Return (\\r) and Line Feed (\\n) characters in user-supplied parameters. The vulnerability exists in io.netty.handler.codec.smtp.DefaultSmtpRequest, where parameters are directly concatenated into the SMTP command string without sanitization. When methods such as SmtpRequests.rcpt(recipient) are called with a malicious string containing CRLF sequences, attackers can inject arbitrary SMTP commands. Because the injected commands are sent from the server's trusted IP address, resulting emails will likely pass SPF and DKIM authentication checks, making them appear legitimate. This allows remote attackers who can control SMTP command parameters (such as email recipients) to forge arbitrary emails from the trusted server, potentially impersonating executives and forging high-stakes corporate communications. This issue has been patched in versions 4.1.129.Final and 4.2.8.Final. No known workarounds exist.","exploit_maturity":"Proof of concept only","published":"2025-10-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-55039","description":"This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0.\n\n\n\nApache Spark versions before 4.0.0, 3.5.2 and 3.4.4 use an insecure default network encryption cipher for RPC communication between nodes.\n\nWhen spark.network.crypto.enabled is set to true (it is set to false by default), but spark.network.crypto.cipher is not explicitly configured, Spark defaults to AES in CTR mode (AES/CTR/NoPadding), which provides encryption without authentication.\n\nThis vulnerability allows a man-in-the-middle attacker to modify encrypted RPC traffic undetected by flipping bits in ciphertext, potentially compromising heartbeat messages or application data and affecting the integrity of Spark workflows.\n\n\nTo mitigate this issue, users should either configure spark.network.crypto.cipher to AES/GCM/NoPadding to enable authenticated encryption or\n\nenable SSL encryption by setting spark.ssl.enabled to true, which provides stronger transport security.","exploit_maturity":"No public exploit","published":"2025-10-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-44088","description":"Malicious script injection ('Cross-site Scripting') vulnerability in Apache Geode web-api (REST). This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information and even account takeover.\n\n\n\nThis issue affects Apache Geode: all versions prior to 1.15.2\n\nUsers are recommended to upgrade to version 1.15.2, which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-10-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62252","description":"Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows remote authenticated users in one virtual instance to assign an organization to a user in a different virtual instance via the _com_liferay_users_admin_web_portlet_UsersAdminPortlet_addUserIds parameter.","exploit_maturity":"No public exploit","published":"2025-10-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62251","description":"Liferay Portal 7.3.0 through 7.4.3.119, and Liferay DXP 2023.Q3.1 through 2023.Q3.8, 2023.Q4.0 through 2023.Q4.5, 7.4 GA through update 92 and 7.3 GA though update 36 shows content to users who do not have permission to view it via the Menu Display Widget. This security flaw could result in sensitive information being exposed to unauthorized users.","exploit_maturity":"No public exploit","published":"2025-10-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62246","description":"Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions allow remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into a user’s first, middle or last name text field to (1) page comments widget, (2) blog entry comments, (3) document and media document comments, (4) message board messages, (5) wiki page comments or (6) other widgets/apps that supports mentions.","exploit_maturity":"No public exploit","published":"2025-10-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62244","description":"Insecure direct object reference (IDOR) vulnerability in Publications in Liferay Portal 7.3.1 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92, and 7.3 GA through update 36 allows remote authenticated attackers to view the edit page of a publication via the _com_liferay_change_tracking_web_portlet_PublicationsPortlet_ctCollectionId parameter.","exploit_maturity":"No public exploit","published":"2025-10-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62243","description":"Insecure direct object reference (IDOR) vulnerability in Publications in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote authenticated attackers to view publication comments via the _com_liferay_change_tracking_web_portlet_PublicationsPortlet_value parameter.\n\nPublications comments in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 does not properly check user permissions, which allows remote authenticated users to edit publication comments via crafted URLs.","exploit_maturity":"No public exploit","published":"2025-10-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62242","description":"Insecure Direct Object Reference (IDOR) vulnerability with account addresses in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote authenticated users to from one account to view addresses from a different account via the _com_liferay_account_admin_web_internal_portlet_AccountEntriesAdminPortlet_addressId parameter.","exploit_maturity":"No public exploit","published":"2025-10-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62241","description":"Insecure Direct Object Reference (IDOR) vulnerability with shipment addresses in Liferay DXP 2023.Q4.1 through 2023.Q4.5 allows remote authenticated users to from one virtual instance to view the shipment addresses of different virtual instance via the _com_liferay_commerce_order_web_internal_portlet_CommerceOrderPortlet_commerceOrderId parameter.","exploit_maturity":"No public exploit","published":"2025-10-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62245","description":"Cross-site request forgery (CSRF) vulnerability in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote attackers to add and edit publication comments.","exploit_maturity":"No public exploit","published":"2025-10-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62239","description":"Cross-site scripting (XSS) vulnerability in workflow process builder in Liferay Portal 7.4.3.21 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 21 through update 92 allows remote authenticated attackers to inject arbitrary web script or HTML via the crafted input in a workflow definition.","exploit_maturity":"No public exploit","published":"2025-10-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62238","description":"Stored cross-site scripting (XSS) vulnerability on the Membership page in Account Settings in Liferay Portal 7.4.3.21 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 21 through update 92 allows remote authenticated attackers to inject arbitrary web script or HTML via a crafted payload injected into a Account's “Name“ text field.","exploit_maturity":"No public exploit","published":"2025-10-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62237","description":"Stored cross-site scripting (XSS) vulnerability in Commerce’s view order page in Liferay Portal 7.4.3.8 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 8 through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an Account’s “Name” text field.","exploit_maturity":"No public exploit","published":"2025-10-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-37727","description":"Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex","exploit_maturity":"No public exploit","published":"2025-10-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-11581","description":"A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of the component OpenAPIController. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.","exploit_maturity":"Proof of concept only","published":"2025-10-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-11580","description":"A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.","exploit_maturity":"Working exploit published","published":"2025-10-10","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-62240","description":"Multiple cross-site scripting (XSS) vulnerabilities with Calendar events in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.7, 7.4 update 35 through update 92, and 7.3 update 25 through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a user’s (1) First Name, (2) Middle Name or (3) Last Name text field.","exploit_maturity":"No public exploit","published":"2025-10-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-62228","description":"Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, we recommend users update Flink CDC version to 3.5.0 which address this issue.","exploit_maturity":"No public exploit","published":"2025-10-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-61788","description":"Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, the paella would include and render some user inputs (metadata like title, description, etc.) unfiltered and unmodified. The vulnerability allows attackers to inject and malicious HTML and JavaScript in the player, which would then be executed in the browsers of users watching the prepared media. This can then be used to modify the site or to execute actions in the name of logged-in users. To inject malicious metadata, an attacker needs write access to the system. For example, the ability to upload media and modify metadata. This cannot be exploited by unauthenticated users. This issue is fixed in Opencast 17.8 and 18.2.","exploit_maturity":"No public exploit","published":"2025-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43830","description":"Stored cross-site scripting (XSS) vulnerability in Forms in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and 7.3 GA through update 35 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a form with a rich text type field.","exploit_maturity":"No public exploit","published":"2025-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43829","description":"Stored cross-site scripting (XSS) vulnerability in diagram type products in Commerce in Liferay Portal 7.4.3.18 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 18 through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a SVG file.","exploit_maturity":"No public exploit","published":"2025-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43821","description":"Cross-site scripting (XSS) vulnerability in the Commerce Product Comparison Table widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a Commerce Product's Name text field.","exploit_maturity":"No public exploit","published":"2025-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43771","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Notifications widget in Liferay Portal 7.4.3.102 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5 and 2023.Q3.1 through 2023.Q3.10 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into (1) a user’s “First Name” text field, (2) a user’s “Middle Name” text field, (3) a user’s “Last Name” text field, (4) the “Other Reason” text field when flagging content, or (5) the name of the flagged content.","exploit_maturity":"No public exploit","published":"2025-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43823","description":"Cross-site scripting (XSS) vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4 before patch 6, 2023.Q3 before patch 9, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a Commerce Product's Name text field.","exploit_maturity":"No public exploit","published":"2025-10-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43822","description":"Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.3.15 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 15 through update 92 allow remote attackers to inject arbitrary web script or HTML via crafted payload injected into a Terms and Condition's Name text field to (1) Payment Terms, or (2) the Delivery Term on the view order page.","exploit_maturity":"No public exploit","published":"2025-10-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43824","description":"The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows remote authenticated users to change the file extension when a vCard file is downloaded.","exploit_maturity":"No public exploit","published":"2025-10-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43825","description":"A vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.5, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows sensitive user data to be included in the Freemarker template. This weakness permits an unauthorized actor to gain access to, and potentially render, confidential information that should remain restricted.","exploit_maturity":"No public exploit","published":"2025-10-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43827","description":"Insecure Direct Object Reference (IDOR) vulnerability with audit events in Liferay Portal 7.4.0 through 7.4.3.117, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows remote authenticated users to from one virtual instance to view the audit events from a different virtual instance via the _com_liferay_portal_security_audit_web_portlet_AuditPortlet_auditEventId parameter.","exploit_maturity":"No public exploit","published":"2025-09-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43826","description":"Stored cross-site scripting (XSS) vulnerabilities in Web Content translation in Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allow remote attackers to inject arbitrary web script or HTML via any rich text field in a web content article.","exploit_maturity":"No public exploit","published":"2025-09-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43820","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Calendar widget when inviting users to a event in Liferay Portal 7.4.3.35 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.6, 7.4 update 35 through update 92, and 7.3 update 25 through update 35 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a user’s (1) First Name, (2) Middle text, or (3) Last Name text fields.","exploit_maturity":"No public exploit","published":"2025-09-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43818","description":"Cross-site scripting (XSS) vulnerability in the Calendar widget in Liferay Portal 7.4.3.35 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.6, 7.4 update 35 through update 92, and 7.3 update 25 through update 36 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a Calendar's “Name” text field","exploit_maturity":"No public exploit","published":"2025-09-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43817","description":"Multiple reflected cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.3.74 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.6, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 74 through update 92 allow remote attackers to inject arbitrary web script or HTML via the `redirect` parameter to (1) Announcements, or (2) Alerts.","exploit_maturity":"No public exploit","published":"2025-09-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43815","description":"Reflected cross-site scripting (XSS) vulnerability on the page configuration page in Liferay Portal 7.4.3.102 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, and 2023.Q3.5 allows remote attackers to inject arbitrary web script or HTML via the com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURLTitle parameter.","exploit_maturity":"No public exploit","published":"2025-09-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43813","description":"Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to access arbitrary CSS and JSS files and load the files multiple times via the query string in a URL.","exploit_maturity":"No public exploit","published":"2025-09-29","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-43812","description":"Cross-site scripting (XSS) vulnerability in web content template in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into a web content structure's Name text field","exploit_maturity":"No public exploit","published":"2025-09-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43811","description":"Multiple stored cross-site scripting (XSS) vulnerability in the related asset selector in Liferay Portal 7.4.3.50 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.7, and 7.4 update 50 through update 92 allows remote authenticated attackers to inject arbitrary web script or HTML via a crafted payload injected into an asset author’s (1) First Name, (2) Middle Name, or (3) Last Name text field.","exploit_maturity":"No public exploit","published":"2025-09-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-36099","description":"IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A privileged user could exploit this vulnerability to cause the server to consume memory resources.","exploit_maturity":"No public exploit","published":"2025-09-29","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-1396","description":"A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct \"User does not exist\" error message to the login form, regardless of the validate_username setting. This behavior allows malicious actors to determine which usernames exist in the system based on observable discrepancies in the application's responses.\n\n\nExploitation of this vulnerability could aid in brute-force attacks, targeted phishing campaigns, or other social engineering techniques by confirming the validity of user identifiers within the system.","exploit_maturity":"No public exploit","published":"2025-09-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-56769","description":"An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.","exploit_maturity":"Proof of concept only","published":"2025-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43816","description":"A memory leak in the headless API for StructuredContents in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2024.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows an attacker to cause server unavailability (denial of service) via repeatedly calling the API endpoint.","exploit_maturity":"No public exploit","published":"2025-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-58457","description":"Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and restore command with insufficient permissions.\n\nThis issue affects Apache ZooKeeper: from 3.9.0 before 3.9.4.\n\nUsers are recommended to upgrade to version 3.9.4, which fixes the issue.\n\nThe issue can be mitigated by disabling both commands (via admin.snapshot.enabled and admin.restore.enabled), disabling the whole AdminServer interface (via admin.enableServer), or ensuring that the root ACL does not provide open permissions. (Note that ZooKeeper ACLs are not recursive, so this does not impact operations on child nodes besides notifications from recursive watches.)","exploit_maturity":"No public exploit","published":"2025-09-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-48459","description":"Deserialization of Untrusted Data vulnerability in Apache IoTDB.\n\nThis issue affects Apache IoTDB: from 1.0.0 before 2.0.5.\n\nUsers are recommended to upgrade to version 2.0.5, which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-09-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-43819","description":"A Insufficient Session Expiration vulnerability in the Liferay Portal 7.4.3.121 through 7.3.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, and 2024.Q1.1 through 2024.Q1.12 is allow an remote non-authenticated attacker to reuse old user session by SLO API","exploit_maturity":"No public exploit","published":"2025-09-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43779","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 allows a remote authenticated attacker to inject JavaScript code via _com_liferay_commerce_product_definitions_web_internal_portlet_CPDefinitionsPortlet_productTypeName parameter. This malicious payload is then reflected and executed within the user's browser.","exploit_maturity":"No public exploit","published":"2025-09-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-59822","description":"Http4s is a Scala interface for HTTP services. In versions from 1.0.0-M1 to before 1.0.0-M45 and before 0.23.31, http4s is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section. This vulnerability could enable attackers to bypass front-end servers security controls, launch targeted attacks against active users, and poison web caches. A pre-requisite for exploitation involves the web application being deployed behind a reverse-proxy that forwards trailer headers. This issue has been patched in versions 1.0.0-M45 and 0.23.31.","exploit_maturity":"Proof of concept only","published":"2025-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-4760","description":"An authenticated stored cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper validation of user-supplied input during API document upload in the Publisher portal. A user with publisher privileges can upload a crafted API document containing malicious JavaScript, which is later rendered in the browser when accessed by other users.\n\nA successful attack could result in redirection to malicious websites, unauthorized UI modifications, or exfiltration of browser-accessible data. However, session-related sensitive cookies are protected by the httpOnly flag, preventing session hijacking.","exploit_maturity":"No public exploit","published":"2025-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-6429","description":"A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain conditions, error messages are passed through URL parameters without validation, allowing malicious actors to inject arbitrary content into the UI.\n\nBy exploiting this vulnerability, attackers can manipulate browser-displayed error messages, enabling social engineering attacks through deceptive or misleading content.","exploit_maturity":"No public exploit","published":"2025-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-59432","description":"SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms. Prior to version 3.2, a timing attack vulnerability exists in the SCRAM Java implementation. The issue arises because Arrays.equals was used to compare secret values such as client proofs and server signatures. Since Arrays.equals performs a short-circuit comparison, the execution time varies depending on how many leading bytes match. This behavior could allow an attacker to perform a timing side-channel attack and potentially infer sensitive authentication material. All users relying on SCRAM authentication are impacted. This vulnerability has been patched in version 3.1 by replacing Arrays.equals with MessageDigest.isEqual, which ensures constant-time comparison.","exploit_maturity":"No public exploit","published":"2025-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43814","description":"In Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions the audit events records a user’s password reminder answer, which allows remote authenticated users to obtain a user’s password reminder answer via the audit events.","exploit_maturity":"No public exploit","published":"2025-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43810","description":"Insecure Direct Object Reference (IDOR) vulnerability with commerce order notes in Liferay Portal 7.3.5 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote authenticated users to from one virtual instance to add a note to an order in a different virtual instance via the _com_liferay_commerce_order_web_internal_portlet_CommerceOrderPortlet_commerceOrderId parameter.","exploit_maturity":"No public exploit","published":"2025-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43807","description":"Stored cross-site scripting (XSS) vulnerability in the notifications widget in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a publication’s “Name” text field.","exploit_maturity":"No public exploit","published":"2025-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43806","description":"Batch Engine in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 does not properly check permission with import and export tasks, which allows remote authenticated users to access the exported data via the REST APIs.","exploit_maturity":"No public exploit","published":"2025-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43809","description":"Cross-Site Request Forgery (CSRF) vulnerability in the server (license) registration page in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.9, 7.4 GA through update 92, and older unsupported versions allows remote attackers to register a server license via the 'orderUuid' parameter.","exploit_maturity":"No public exploit","published":"2025-09-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43808","description":"The Commerce component in Liferay Portal 7.3.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and 7.3 service pack 3 through update 35 saves virtual products uploaded to Documents and Media with guest view permission, which allows remote attackers to access and download virtual products for free via a crafted URL.","exploit_maturity":"No public exploit","published":"2025-09-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43803","description":"Insecure direct object reference (IDOR) vulnerability in the Contacts Center widget in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.6, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows remote attackers to view contact information, including the contact’s name and email address, via the _com_liferay_contacts_web_portlet_ContactsCenterPortlet_entryId parameter.","exploit_maturity":"No public exploit","published":"2025-09-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-59476","description":"Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be inserted from user-specified content in log messages, allowing attackers able to control log message contents to insert line break characters, followed by forged log messages that may mislead administrators reviewing log output.","exploit_maturity":"No public exploit","published":"2025-09-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-59475","description":"Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu, allowing attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu (e.g., whether Credentials Plugin is installed).","exploit_maturity":"No public exploit","published":"2025-09-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-59474","description":"Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a page intentionally accessible to users lacking Overall/Read permission, allowing attackers without Overall/Read permission to list agent names through its sidepanel executors widget.","exploit_maturity":"Working exploit published","published":"2025-09-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-43805","description":"Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, and 7.3 GA through update 35 does not perform an authorization check when users attempt to view a display page template, which allows remote attackers to view display page templates via crafted URLs.","exploit_maturity":"No public exploit","published":"2025-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43804","description":"Cross-site scripting (XSS) vulnerability in Search widget in Liferay Portal 7.4.3.93 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_portal_search_web_portlet_SearchPortlet_userId parameter.","exploit_maturity":"No public exploit","published":"2025-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43801","description":"Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to perform a denial-of-service (DoS) attacks via a crafted XML-RPC request.","exploit_maturity":"No public exploit","published":"2025-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-59328","description":"A vulnerability in Apache Fory allows a remote attacker to cause a Denial of Service (DoS). The issue stems from the insecure deserialization of untrusted data. An attacker can supply a large, specially crafted data payload that, when processed, consumes an excessive amount of CPU resources during the deserialization process. This leads to CPU exhaustion, rendering the application or system using the Apache Fory library unresponsive and unavailable to legitimate users.\n\nUsers of Apache Fory are strongly advised to upgrade to version 0.12.2 or later to mitigate this vulnerability. Developers of libraries and applications that depend on Apache Fory should update their dependency requirements to Apache Fory 0.12.2 or later and release new versions of their software.","exploit_maturity":"No public exploit","published":"2025-09-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-59154","description":"Openfire is an XMPP server licensed under the Open Source Apache License. Openfire’s SASL EXTERNAL mechanism for client TLS authentication contains a vulnerability in how it extracts user identities from X.509 certificates. Instead of parsing the structured ASN.1 data, the code calls X509Certificate.getSubjectDN().getName() and applies a regex to look for CN=. This method produces a provider-dependent string that does not escape special characters. In SunJSSE (sun.security.x509.X500Name), for example, commas and equals signs inside attribute values are not escaped. As a result, a malicious certificate can embed CN= inside another attribute value (e.g. OU=\"CN=admin,\"). The regex will incorrectly interpret this as a legitimate Common Name and extract admin. If SASL EXTERNAL is enabled and configured to map CNs to user accounts, this allows the attacker to impersonate another user. The fix is included in Openfire 5.0.2 and 5.1.0.","exploit_maturity":"No public exploit","published":"2025-09-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43802","description":"Stored cross-site scripting (XSS) vulnerability in a custom object’s /o/c/\u003cobject-name\u003e API endpoint in Liferay Portal 7.4.3.51 through 7.4.3.109, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 update 51 through update 92, and 7.3 update 33 through update 35. allows remote attackers to inject arbitrary web script or HTML via the externalReferenceCode parameter.","exploit_maturity":"No public exploit","published":"2025-09-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43800","description":"Cross-site scripting (XSS) vulnerability in Objects in Liferay Portal 7.4.3.20 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an object with a rich text type field.","exploit_maturity":"No public exploit","published":"2025-09-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43799","description":"Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35, and older unsupported versions does not limit access to APIs before a user has changed their initial password, which allows remote users to access and edit content via the API.","exploit_maturity":"No public exploit","published":"2025-09-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43797","description":"In Liferay Portal 7.1.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions, the default membership type of a newly created site is “Open” which allows any registered users to become a member of the site. A remote attacker with site membership can potentially view, add or edit content on the site.","exploit_maturity":"No public exploit","published":"2025-09-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43794","description":"Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote authenticated attackers with the instance administrator role to inject arbitrary web script or HTML into all pages via a crafted payload injected into the Instance Configuration's (1) CDN Host HTTP text field or (2) CDN Host HTTPS text field.","exploit_maturity":"No public exploit","published":"2025-09-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43793","description":"Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions may incorrectly identify the subdomain of a domain name and create a supercookie, which allows remote attackers who control a website that share the same TLD to read cookies set by the application.","exploit_maturity":"No public exploit","published":"2025-09-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43791","description":"Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a \"Rich Text\" type field to (1) a web content structure, (2) a Documents and Media Document Type , or (3) custom assets that uses the Data Engine's module Rich Text field.","exploit_maturity":"No public exploit","published":"2025-09-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43795","description":"Open redirect vulnerability in the System Settings in Liferay Portal 7.1.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4 , 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_configuration_admin_web_portlet_SystemSettingsPortlet_redirect parameter.\n\nOpen redirect vulnerability in the Instance Settings in Liferay Portal 7.1.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4 , 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_configuration_admin_web_portlet_InstanceSettingsPortlet_redirect parameter.\n\nOpen redirect vulnerability in the Site Settings in Liferay Portal 7.1.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4 , 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_site_admin_web_portlet_SiteSettingsPortlet_redirect parameter.","exploit_maturity":"No public exploit","published":"2025-09-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43788","description":"The organization selector in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q1.1 through 2024.Q1.12 and 7.4 update 81 through update 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations.","exploit_maturity":"No public exploit","published":"2025-09-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43787","description":"A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q3.0, 2025.Q2.0 through 2025.Q2.12, 2025.Q1.0 through 2025.Q1.17, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.20 allows an remote authenticated attacker to inject JavaScript through the organization site names. The malicious payload is stored and executed without proper sanitization or escaping.","exploit_maturity":"No public exploit","published":"2025-09-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43782","description":"Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.7, 2024.Q1.1 through 2024.Q1.12, and 7.4 GA through update 92 allows remote authenticated users to access a workflow definition by name via the API","exploit_maturity":"No public exploit","published":"2025-09-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43785","description":"Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 through 7.4.3.128, and Liferay DXP 2024 Q2.0 through 2024.Q2.9, 2024.Q1.1 through 2024.Q1.12, and 7.4 update 45 through update 92 allows remote attackers to execute an arbitrary web script or HTML in the My Workflow Tasks page.","exploit_maturity":"No public exploit","published":"2025-09-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43784","description":"Improper Access Control vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.8, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows guest users to obtain object entries information via the API Builder.","exploit_maturity":"No public exploit","published":"2025-09-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43783","description":"Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.73 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 update 73 through update 92 allows remote attackers to inject arbitrary web script or HTML via the /c/portal/comment/discussion/get_editor path.","exploit_maturity":"No public exploit","published":"2025-09-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43786","description":"Enumeration of ERC from object entry in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 and 7.4 GA through update 92 allow attackers to determine existent ERC in the application by exploit the time response.","exploit_maturity":"No public exploit","published":"2025-09-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43781","description":"Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.110 through 7.4.3.128, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.12 allows remote attackers to inject arbitrary web script or HTML via the URL in search bar portlet","exploit_maturity":"No public exploit","published":"2025-09-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43778","description":"A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.11, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.20 allows an remote authenticated attacker to inject JavaScript through the name of a fieldset in Kaleo Forms Admin. The malicious payload is stored and executed without proper sanitization or escaping.","exploit_maturity":"No public exploit","published":"2025-09-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43777","description":"Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.19 exposes \"Internal Server Error\" in the response body when a login attempt is made with a deleted Client Secret.","exploit_maturity":"No public exploit","published":"2025-09-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43776","description":"A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19 and 7.4 GA through update 92 allows an remote authenticated attacker to inject JavaScript through Custom Object field label. The malicious payload is stored and executed through Process Builder's Configuration tab without proper escaping.","exploit_maturity":"No public exploit","published":"2025-09-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43775","description":"Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.5, 2024.Q2.0 through 2024.Q2.12, 2024.Q1.1 through 2024.Q1.12, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via remote app title field.","exploit_maturity":"No public exploit","published":"2025-09-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43763","description":"A server-side request forgery (SSRF) vulnerability exist in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.20 that affects custom object attachment fields. This flaw allows an attacker to manipulate the application into making unauthorized requests to other instances, creating new object entries that link to external resources.","exploit_maturity":"No public exploit","published":"2025-09-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-58782","description":"Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons.\n\nThis issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1.\n\nDeployments that accept JNDI URIs for JCR lookup from untrusted users allows them to inject malicious JNDI references, potentially leading to arbitrary code execution through deserialization of untrusted data.\nUsers are recommended to upgrade to version 2.22.2. JCR lookup through JNDI has been disabled by default in 2.22.2. Users of this feature need to enable it explicitly and are adviced to review their use of JNDI URI for JCR lookup.","exploit_maturity":"No public exploit","published":"2025-09-08","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-58369","description":"fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS session, if one side of the connection shuts down `write` while the peer side is awaiting more data to progress the TLS handshake, the peer side will spin loop on the socket read, fully utilizing a CPU. The CPU is consumed until the overall connection is closed, potentially shutting down a fs2-io powered server. This issue is fixed in versions 2.5.13, 3.12.1, and 3.13.0-M7.","exploit_maturity":"No public exploit","published":"2025-09-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-10044","description":"A flaw was found in Keycloak. Keycloak’s account console and other pages accept arbitrary text in the error_description query parameter. This text is directly rendered in error pages without validation or sanitization. While HTML encoding prevents XSS, an attacker can craft URLs with misleading messages (e.g., fake support phone numbers or URLs), which are displayed within the trusted Keycloak UI. This creates a phishing vector, potentially tricking users into contacting malicious actors.","exploit_maturity":"No public exploit","published":"2025-09-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-9467","description":"When the Vaadin Upload's start listener is used to validate metadata about an incoming upload, it is possible to bypass the upload validation. \n\n\nUsers of affected versions should apply the following mitigation or upgrade. Releases that have fixed this issue include:\n\nProduct version\nVaadin 7.0.0 - 7.7.47\nVaadin 8.0.0 - 8.28.1\nVaadin 14.0.0 - 14.13.0\nVaadin 23.0.0 - 23.6.1\nVaadin 24.0.0 - 24.7.6\n\nMitigation\nUpgrade to 7.7.48\nUpgrade to 8.28.2\nUpgrade to 14.13.1\nUpgrade to 23.6.2\nUpgrade to 24.7.7 or newer\n\nPlease note that Vaadin versions 10-13 and 15-22 are no longer supported and you should update either to the latest 14, 23, 24 version.\n\nArtifacts     Maven coordinatesVulnerable versionsFixed versioncom.vaadin:vaadin-server\n7.0.0 - 7.7.47\n≥7.7.48\ncom.vaadin:vaadin-server\n8.0.0 - 8.28.1\n≥8.28.2\ncom.vaadin:vaadin\n14.0.0 - 14.13.0\n≥14.13.1\ncom.vaadin:vaadin23.0.0 - 23.6.1\n≥23.6.2\ncom.vaadin:vaadin24.0.0 - 24.7.6\n≥24.7.7com.vaadin:vaadin-upload-flow\n2.0.0 - 14.13.0\n≥14.13.1\ncom.vaadin:vaadin-upload-flow\n23.0.0 - 23.6.1\n≥23.6.2\ncom.vaadin:vaadin-upload-flow\n24.0.0 - 24.7.6\n≥24.7.7","exploit_maturity":"No public exploit","published":"2025-09-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-58057","description":"Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026 clients. In netty-codec-compression versions 4.1.124.Final and below, and netty-codec versions 4.2.4.Final and below, when supplied with specially crafted input, BrotliDecoder and certain other decompression decoders will allocate a large number of reachable byte buffers, which can lead to denial of service. BrotliDecoder.decompress has no limit in how often it calls pull, decompressing data 64K bytes at a time. The buffers are saved in the output list, and remain reachable until OOM is hit. This is fixed in versions 4.1.125.Final of netty-codec and 4.2.5.Final of netty-codec-compression.","exploit_maturity":"Proof of concept only","published":"2025-09-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-58460","description":"A missing permission check in Jenkins OpenTelemetry Plugin 3.1543.v8446b_92b_cd64 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2025-09-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-58459","description":"Jenkins global-build-stats Plugin 322.v22f4db_18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs.","exploit_maturity":"No public exploit","published":"2025-09-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-58458","description":"In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying `amazon-s3` protocol for use with JGit, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-09-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-46047","description":"A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers to determine valid usernames via the Login parameter.","exploit_maturity":"Proof of concept only","published":"2025-09-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43773","description":"Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 has a security vulnerability that allowing for improper access through the expandoTableLocalService.","exploit_maturity":"No public exploit","published":"2025-08-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43770","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the referer or FORWARD_URL using %00 in those parameters.","exploit_maturity":"No public exploit","published":"2025-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43769","description":"Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows remote attackers to execute arbitrary web script or HTML via components tab.","exploit_maturity":"No public exploit","published":"2025-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43768","description":"Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows authenticated users without any permissions to access sensitive information of admin users using JSONWS APIs.","exploit_maturity":"No public exploit","published":"2025-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43767","description":"Open Redirect vulnerability in /c/portal/edit_info_item parameter redirect in Liferay Portal 7.4.3.86 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 update 86 through update 92 allows an attacker to exploit this security vulnerability to redirect users to a malicious site.","exploit_maturity":"No public exploit","published":"2025-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43766","description":"The Liferay Portal 7.4.0 through 7.3.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows the upload of unrestricted files in the style books component that are processed within the environment enabling arbitrary code execution by attackers.","exploit_maturity":"No public exploit","published":"2025-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43765","description":"A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.13 and 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the text field from a web content.","exploit_maturity":"No public exploit","published":"2025-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43764","description":"Self-ReDoS (Regular expression Denial of Service) exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.1, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.20 and 7.4 GA through update 92, which allows authenticated users with permissions to update Kaleo Workflows to enter a malicious Regex pattern causing their browser to hang for a very long time.","exploit_maturity":"No public exploit","published":"2025-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-9341","description":"Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files org/bouncycastle/crypto/fips/AESNativeCBC.Java, org/bouncycastle/crypto/engines/AESNativeCBC.Java.\n\nThis issue affects Bouncy Castle for Java FIPS: 2.1.0; Bouncy Castle for Java LTS: from 2.73.0 through 2.73.7.","exploit_maturity":"No public exploit","published":"2025-08-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-51825","description":"JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows bypassing SQL blacklist restrictions.","exploit_maturity":"No public exploit","published":"2025-08-22","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-43762","description":"Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allow users to upload an unlimited amount of files through the forms, the files are stored in the document_library allowing an attacker to cause a potential DDoS.","exploit_maturity":"No public exploit","published":"2025-08-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43761","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.4, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the frontend-editor-ckeditor-web/ckeditor/samples/old/ajax.html path","exploit_maturity":"No public exploit","published":"2025-08-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43760","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.6, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.20 and 7.4 GA through update 92 allows an remote authenticated attacker to inject JavaScript into the PortalUtil.escapeRedirect","exploit_maturity":"No public exploit","published":"2025-08-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43759","description":"Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows admin users of a virtual instance to add pages that are not in the default/main virtual instance, then any tenant can create a list of all other tenants.","exploit_maturity":"No public exploit","published":"2025-08-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43758","description":"Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows unauthenticated users (guests) to access via URL files uploaded by object entry and stored in document_library","exploit_maturity":"No public exploit","published":"2025-08-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43752","description":"Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allow users to upload an unlimited amount of files through the object entries attachment fields, the files are stored in the document_library allowing an attacker to cause a potential DDoS.","exploit_maturity":"No public exploit","published":"2025-08-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43751","description":"User enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10 and 7.4 GA through update 92 allows remote attackers to determine if an account exist in the application via the create account page.","exploit_maturity":"No public exploit","published":"2025-08-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-9162","description":"A flaw was found in org.keycloak/keycloak-model-storage-service. The KeycloakRealmImport custom resource substitutes placeholders within imported realm documents, potentially referencing environment variables. This substitution process\nallows for injection attacks when crafted realm documents are processed. An attacker can leverage this to inject malicious content during the realm import procedure. This can lead to unintended consequences within the Keycloak environment.","exploit_maturity":"No public exploit","published":"2025-08-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43756","description":"\u003c!--td {border: 1px solid #cccccc;}br {mso-data-placement:same-cell;}--\u003eA reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.15, 2025.Q2.0 through 2025.Q2.2 and 2024.Q1.13 through 2024.Q1.19 allows a remote authenticated user to inject JavaScript code via snippet parameter.","exploit_maturity":"No public exploit","published":"2025-08-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43755","description":"A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.13, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.17 and 7.4 GA through update 92 allows an remote authenticated attacker to inject JavaScript into the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_type parameter.","exploit_maturity":"No public exploit","published":"2025-08-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43754","description":"Username enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows attackers to determine if an account exist in the application by inspecting the server processing time of the login request.","exploit_maturity":"No public exploit","published":"2025-08-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43747","description":"A server-side request forgery (SSRF) vulnerability exists in the Liferay DXP 2025.Q2.0 through 2025.Q2.3 due to insecure domain validation on analytics.cloud.domain.allowed, allowing an attacker to perform requests by change the domain and bypassing the validation method, this insecure validation is not distinguishing between trusted subdomains and malicious domains.","exploit_maturity":"No public exploit","published":"2025-08-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-43757","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.2, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 allows a remote authenticated attacker to inject JavaScript code via _com_liferay_dynamic_data_mapping_web_portlet_DDMPortlet_definition parameter.","exploit_maturity":"No public exploit","published":"2025-08-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43750","description":"Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows remote unauthenticated users (guests) to upload files via the form attachment field without proper validation, enabling extension obfuscation and bypassing MIME type checks.","exploit_maturity":"No public exploit","published":"2025-08-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43749","description":"Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows unauthenticated users (guests) to access via URL files uploaded in the form and stored in document_library","exploit_maturity":"No public exploit","published":"2025-08-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43746","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.2, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 allows a remote authenticated attacker to inject JavaScript code via _com_liferay_dynamic_data_mapping_web_portlet_DDMPortlet_portletNamespace and _com_liferay_dynamic_data_mapping_web_portlet_DDMPortlet_namespace parameter.","exploit_maturity":"No public exploit","published":"2025-08-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43742","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript in web content for friendly urls.","exploit_maturity":"No public exploit","published":"2025-08-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43741","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows an remote authenticated attacker to inject JavaScrip in the _com_liferay_users_admin_web_portlet_UsersAdminPortlet_assetTagNames parameter","exploit_maturity":"No public exploit","published":"2025-08-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-39954","description":"CWE-918 Server-Side Request Forgery (SSRF) in eventmesh-runtime module in WebhookUtil.java on windows\\linux\\mac os e.g. allows the attacker can abuse functionality on the server to read or update internal resources.\nUsers are recommended to upgrade to version 1.12.0 or use the master branch , which fixes this issue.","exploit_maturity":"No public exploit","published":"2025-08-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43745","description":"A CSRF vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.7, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19 and 7.4 GA through update 92 allows remote attackers to performs cross-origin request on behalf of the authenticated user via the endpoint parameter.","exploit_maturity":"No public exploit","published":"2025-08-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43744","description":"A stored DOM-based Cross-Site Scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.5, 2025.Q1.0 through 2025.Q1.15, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19 and 7.4 GA through update 92 exists in the Asset Publisher configuration UI within the Source.js module. This vulnerability allows attackers to inject arbitrary JavaScript via DDM structure field labels which are then inserted into the DOM using innerHTML without proper encoding.","exploit_maturity":"No public exploit","published":"2025-08-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43743","description":"Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows any authenticated remote user to view other calendars by allowing them to enumerate the names of other users, given an attacker the possibility to send phishing to these users.","exploit_maturity":"No public exploit","published":"2025-08-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43740","description":"A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.3.120 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0 through 2025.Q1.15, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13 and 2024.Q1.9 through 2024.Q1.19 allows an remote authenticated attacker to inject JavaScript through the message boards feature available via the web interface.","exploit_maturity":"No public exploit","published":"2025-08-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43739","description":"Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allow any authenticated user to modify the content of emails sent through the calendar portlet, allowing an attacker to send phishing emails to any other user in the same organization.","exploit_maturity":"No public exploit","published":"2025-08-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43738","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0 through 2025.Q1.15, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.19 allows a remote authenticated user to inject JavaScript code via _com_liferay_expando_web_portlet_ExpandoPortlet_displayType parameter.","exploit_maturity":"No public exploit","published":"2025-08-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43737","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8 and 2025.Q1.0 through 2025.Q1.15 allows a remote authenticated user to inject JavaScript code via _com_liferay_journal_web_portlet_JournalPortlet_backURL parameter.","exploit_maturity":"No public exploit","published":"2025-08-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43732","description":"Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.10, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.17 and 7.4 GA through update 92 is vulnerable to Insecure Direct Object Reference (IDOR) in the groupId parameter of the _com_liferay_roles_selector_web_portlet_RolesSelectorPortlet_groupId. When an organization administrator modifies this parameter id value, they can gain unauthorized access to user lists from other organizations.","exploit_maturity":"No public exploit","published":"2025-08-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43731","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.8, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allows an remote authenticated user to inject JavaScript in message board threads and categories.","exploit_maturity":"No public exploit","published":"2025-08-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-41242","description":"Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.\n\nAn application can be vulnerable when all the following are true:\n\n * the application is deployed as a WAR or with an embedded Servlet container\n * the Servlet container does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization \n * the application serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title  with Spring resource handling\n\n\nWe have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application.","exploit_maturity":"Working exploit published","published":"2025-08-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-8916","description":"Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All (API modules), Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files https://github.Com/bcgit/bc-java/blob/main/pkix/src/main/java/org/bouncycastle/pkix/jcajce/PKIXCertPathReviewer.Java, https://github.Com/bcgit/bc-java/blob/main/prov/src/main/java/org/bouncycastle/x509/PKIXCertPathReviewer.Java.\n\nThis issue affects BC Java: from 1.44 through 1.78; BC Java: from 1.44 through 1.78; BCPKIX FIPS: from 1.0.0 through 1.0.7, from 2.0.0 through 2.0.7.","exploit_maturity":"No public exploit","published":"2025-08-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-55668","description":"Session Fixation vulnerability in Apache Tomcat via rewrite valve.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105.\nOlder, EOL versions may also be affected.\n\nUsers are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.","exploit_maturity":"No public exploit","published":"2025-08-13","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-8885","description":"Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BC-FJA bc-fips on All allows Excessive Allocation. This vulnerability is associated with program files https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdenti... https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdentifier.Java .\n\nThis issue affects BC Java: from 1.0 through 1.77; BC-FJA: from 1.0.0 through 1.0.2.5, from 2.0.0 through 2.0.1.","exploit_maturity":"No public exploit","published":"2025-08-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43736","description":"A Denial Of Service via File Upload (DOS) vulnerability in the Liferay Portal 7.4.3.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.8, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allows a user to upload more than 300kb profile picture into the user profile. This size more than the noted max 300kb size. This extra amount of data can make Liferay slower.","exploit_maturity":"No public exploit","published":"2025-08-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43735","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the google_gadget.","exploit_maturity":"No public exploit","published":"2025-08-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-43734","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.10, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allows a remote authenticated attacker to inject JavaScript code in the “first display label” field in the configuration of a custom sort widget. This malicious payload is then reflected and executed by clay button taglib when refreshing the page.","exploit_maturity":"No public exploit","published":"2025-08-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-36000","description":"IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 \n\nis vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","exploit_maturity":"No public exploit","published":"2025-08-12","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-4655","description":"SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows template editors to bypass access validations via crafted URLs.","exploit_maturity":"No public exploit","published":"2025-08-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-4581","description":"Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows a pre-authentication blind SSRF vulnerability in the portal-settings-authentication-opensso-web due to improper validation of user-supplied URLs. An attacker can exploit this issue to force the server to make arbitrary HTTP requests to internal systems, potentially leading to internal network enumeration or further exploitation.","exploit_maturity":"No public exploit","published":"2025-08-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-4576","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.133, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the modules/apps/blogs/blogs-web/src/main/resources/META-INF/resources/blogs/entry_cover_image_caption.jsp","exploit_maturity":"Working exploit published","published":"2025-08-08","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-7195","description":"Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used Operator-SDK before 0.15.2 to scaffold their operator may still be impacted by this if the insecure user_setup script is still being used to build new container images. \n\nIn affected images, the /etc/passwd file is created during build time with group-writable permissions and a group ownership of root (gid=0). An attacker who can execute commands within an affected container, even as a non-root user, may be able to leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.","exploit_maturity":"No public exploit","published":"2025-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-8419","description":"A vulnerability was found in Keycloak-services. Special characters used during e-mail registration may perform SMTP Injection and unexpectedly send short unwanted e-mails. The email is limited to 64 characters (limited local part of the email), so the attack is limited to very shorts emails (subject and little data, the example is 60 chars). This flaw's only direct consequence is an unsolicited email being sent from the Keycloak server. However, this action could be a precursor for more sophisticated attacks.","exploit_maturity":"No public exploit","published":"2025-08-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-32430","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-3 through 16.4.7, 16.5.0-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, two templates contain reflected XSS vulnerabilities, allowing an attacker to execute malicious JavaScript code in the context of the victim's session by getting the victim to visit an attacker-controlled URL. This permits the attacker to perform arbitrary actions using the permissions of the victim. This issue is fixed in versions 16.4.8, 16.10.6 and 17.3.0-rc-1. To workaround the issue, manually patch the WAR with the same changes as the original patch.","exploit_maturity":"Working exploit published","published":"2025-08-06","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-4604","description":"The vulnerable code can bypass the Captcha check in Liferay Portal 7.4.3.80 through 7.4.3.132, and Liferay DXP 2024.Q1.1 through 2024.Q1.19, 2024.Q2.0 through 2024.Q2.13, 2024.Q3.0 through 2024.Q3.13, 2024.Q4.0 through 2024.Q4.7, 2025.Q1.0 through 2025.Q1.15 and 7.4 update 80 through update 92 and then attackers can run scripts in the Gogo shell","exploit_maturity":"No public exploit","published":"2025-08-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-41177","description":"Incomplete Blacklist to Cross-Site Scripting vulnerability in Apache Zeppelin.\n\nThis issue affects Apache Zeppelin: before 0.12.0.\n\nUsers are recommended to upgrade to version 0.12.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-24854","description":"A carefully crafted request using the Image plugin could trigger an XSS \nvulnerability on Apache JSPWiki, which could allow the attacker to \nexecute javascript in the victim's browser and get some sensitive \ninformation about the victim.\n\n\n\n\n\nApache JSPWiki users should upgrade to 2.12.3 or later.","exploit_maturity":"No public exploit","published":"2025-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-54656","description":"** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutralization for Logs vulnerability in Apache Struts.\n\nThis issue affects Apache Struts Extras: before 2.\n\nWhen using LookupDispatchAction, in some cases, Struts may print untrusted input to the logs without any filtering. Specially-crafted input may lead to log output where part of the message masquerades as a separate log line, confusing consumers of the logs (either human or automated). \n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.","exploit_maturity":"No public exploit","published":"2025-07-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-54380","description":"Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to version 17.6, Opencast would incorrectly send the hashed global system account credentials (ie: org.opencastproject.security.digest.user and org.opencastproject.security.digest.pass) when attempting to fetch mediapackage elements included in a mediapackage XML file. A previous CVE prevented many cases where the credentials were inappropriately sent, but not all. Anyone with ingest permissions could cause Opencast to send its hashed global system account credentials to a url of their choosing. This issue is fixed in Opencast 17.6.","exploit_maturity":"No public exploit","published":"2025-07-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-7962","description":"In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \\r and \\n UTF-8 characters to separate different messages.","exploit_maturity":"No public exploit","published":"2025-07-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-7784","description":"A flaw was found in the Keycloak identity and access management system when Fine-Grained Admin Permissions(FGAPv2) are enabled. An administrative user with the manage-users role can escalate their privileges to realm-admin due to improper privilege enforcement. This vulnerability allows unauthorized elevation of access rights, compromising the intended separation of administrative duties and posing a security risk to the realm.","exploit_maturity":"No public exploit","published":"2025-07-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-22227","description":"In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects.","exploit_maturity":"No public exploit","published":"2025-07-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-9343","description":"In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting\nattacks in the Administration Console.","exploit_maturity":"No public exploit","published":"2025-07-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-9342","description":"In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed login attempts. GlassFish 8.0.3 adds automatic attack protection documented in https://glassfish.org/docs/latest/security-guide.html#brute-force-attack-protection .","exploit_maturity":"No public exploit","published":"2025-07-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-10032","description":"In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting\nattacks in the Administration Console.","exploit_maturity":"No public exploit","published":"2025-07-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-10031","description":"In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting\nattacks by modifying the configuration file in the underlying operating system.","exploit_maturity":"No public exploit","published":"2025-07-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-10029","description":"In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting\nattacks in the Administration Console.","exploit_maturity":"No public exploit","published":"2025-07-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53622","description":"DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.4, 8.2, and 9.1, a path traversal vulnerability is possible during the import of an archive (in Simple Archive Format), either from command-line (`./dspace import` command) or from the \"Batch Import (Zip)\" user interface feature. An attacker may craft a malicious Simple Archive Format (SAF) package where the `contents` file references any system files (using relative traversal sequences) which are readable by the Tomcat user. If such a package is imported, this will result in sensitive content disclose, including retrieving arbitrary files or configurations from the server where DSpace is running. The Simple Archive Format (SAF) importer / Batch Import (Zip) is only usable by site administrators (from user interface / REST API) or system administrators (from command-line). Therefore, to exploit this vulnerability, the malicious payload would have to be provided by an attacker and trusted by an administrator (who would trigger the import). The fix is included in DSpace 7.6.4, 8.2 and 9.1. For those who cannot upgrade immediately, it is possible to manually patch the DSpace backend. (No changes are necessary to the frontend.) A pull request exists which can be used to patch systems running DSpace 7.6.x, 8.x or 9.0. Although it is not possible to fully protect the system via workarounds, one may can apply a best practice. Administrators must carefully inspect any SAF archives (they did not construct themselves) before importing, paying close attention to the `contents` file to validate it does not reference files outside of the SAF archives.","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-53621","description":"DSpace open source software is a repository application which provides durable access to digital resources. Two related XML External Entity (XXE) injection possibilities impact all versions of DSpace prior to 7.6.4, 8.2, and 9.1. External entities are not disabled when parsing XML files during import of an archive (in Simple Archive Format), either from command-line (`./dspace import` command) or from the \"Batch Import (Zip)\" user interface feature. External entities are also not explicitly disabled when parsing XML responses from some upstream services (ArXiv, Crossref, OpenAIRE, Creative Commons) used in import from external sources via the user interface or REST API. An XXE injection in these files may result in a connection being made to an attacker's site or a local path readable by the Tomcat user, with content potentially being injected into a metadata field. In the latter case, this may result in sensitive content disclosure, including retrieving arbitrary files or configurations from the server where DSpace is running. The Simple Archive Format (SAF) importer / Batch Import (Zip) is only usable by site administrators (from user interface / REST API) or system administrators (from command-line). Therefore, to exploit this vulnerability, the malicious payload would have to be provided by an attacker and trusted by an administrator, who would trigger the import. The fix is included in DSpace 7.6.4, 8.2, and 9.1. Please upgrade to one of these versions. For those who cannot upgrade immediately, it is possible to manually patch the DSpace backend. One may also apply some best practices, though the protection provided is not as complete as upgrading. Administrators must carefully inspect any SAF archives (they did not construct themselves) before importing. As necessary, affected external services can be disabled to mitigate the ability for payloads to be delivered via external service APIs.","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-53031","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.8, 8.0.8.5, 8.0.8.6, 8.1.1.4 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-50108","description":"Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Workspace). The supported version that is affected is 11.2.20.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Financial Reporting, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Reporting accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-50107","description":"Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Request handling). Supported versions that are affected are 12.2.5-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Universal Work Queue. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Universal Work Queue, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Universal Work Queue accessible data as well as unauthorized read access to a subset of Oracle Universal Work Queue accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-50090","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data as well as unauthorized read access to a subset of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-50073","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-50072","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle WebLogic Server executes to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 4.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-50071","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. While the vulnerability is in Oracle Applications Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data as well as unauthorized read access to a subset of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-50064","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-50061","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 20.12.0-20.12.21, 21.12.0-21.12.21, 22.12.0-22.12.19, 23.12.0-23.12.13 and 24.12.0-24.12.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-48795","description":"Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was introduced which means that the entire temporary file is read into memory and then logged. An attacker might be able to exploit this to cause a denial of service attack by causing an out of memory exception. In addition, it is possible to configure CXF to encrypt temporary files to prevent sensitive credentials from being cached unencrypted on the local filesystem, however this bug means that the cached files are written out to logs unencrypted.\n\nUsers are recommended to upgrade to versions 3.5.11, 3.6.6, 4.0.7 or 4.1.1, which fixes this issue.","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-30761","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf and 11.0.27; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-30760","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.9.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30759","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 7.6.0.0.0, 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30758","description":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: User Interface). Supported versions that are affected are 25.0-25.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM End User accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30756","description":"Vulnerability in Oracle REST Data Services (component: General). The supported version that is affected is 24.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle REST Data Services, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle REST Data Services accessible data as well as unauthorized read access to a subset of Oracle REST Data Services accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30754","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-30753","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30748","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30747","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30746","description":"Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iStore accessible data as well as unauthorized read access to a subset of Oracle iStore accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30745","description":"Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Device Integration). Supported versions that are affected are 12.2.12-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle MES for Process Manufacturing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle MES for Process Manufacturing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle MES for Process Manufacturing accessible data as well as unauthorized read access to a subset of Oracle MES for Process Manufacturing accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30739","description":"Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.11-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. While the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data as well as unauthorized read access to a subset of Oracle CRM Technical Foundation accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-53864","description":"Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the Gson 2.11.0 issue because the Connect2id product could have checked the JSON object nesting depth, regardless of what limits (if any) were imposed by Gson.","exploit_maturity":"Proof of concept only","published":"2025-07-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-48924","description":"Uncontrolled Recursion vulnerability in Apache Commons Lang.\n\nThis issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0.\n\nThe methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a \nStackOverflowError could cause an application to stop.\n\nUsers are recommended to upgrade to version 3.18.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-07-11","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-53743","description":"Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not mask Applitools API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53742","description":"Jenkins Applitools Eyes Plugin 1.16.5 and earlier stores Applitools API keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53678","description":"Jenkins User1st uTester Plugin 1.1 and earlier stores the uTester JWT token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53677","description":"Jenkins Xooa Plugin 0.0.7 and earlier does not mask the Xooa Deployment Token on the global configuration form, increasing the potential for attackers to observe and capture it.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53676","description":"Jenkins Xooa Plugin 0.0.7 and earlier stores the Xooa Deployment Token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53675","description":"Jenkins Warrior Framework Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53674","description":"Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53673","description":"Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53672","description":"Jenkins Kryptowire Plugin 0.2 and earlier stores the Kryptowire API key unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53671","description":"Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53670","description":"Jenkins Nouvola DiveCloud Plugin 1.08 and earlier stores DiveCloud API Keys and Credentials Encryption Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53669","description":"Jenkins VAddy Plugin 1.2.8 and earlier does not mask Vaddy API Auth Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53668","description":"Jenkins VAddy Plugin 1.2.8 and earlier stores Vaddy API Auth Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53667","description":"Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53666","description":"Jenkins Dead Man's Snitch Plugin 0.1 stores Dead Man's Snitch tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53665","description":"Jenkins Apica Loadtest Plugin 1.10 and earlier does not mask Apica Loadtest LTP authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53664","description":"Jenkins Apica Loadtest Plugin 1.10 and earlier stores Apica Loadtest LTP authentication tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53663","description":"Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53662","description":"Jenkins IFTTT Build Notifier Plugin 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53661","description":"Jenkins Testsigma Test Plan run Plugin 1.6 and earlier does not mask Testsigma API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53660","description":"Jenkins QMetry Test Management Plugin 1.13 and earlier does not mask Qmetry Automation API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53659","description":"Jenkins QMetry Test Management Plugin 1.13 and earlier stores Qmetry Automation API Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53658","description":"Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not escape the Applitools URL on the build page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53657","description":"Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier does not mask SLM License Access Keys, client secrets, and passwords displayed on the job configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53656","description":"Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier stores SLM License Access Keys, client secrets, and passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53655","description":"Jenkins Statistics Gatherer Plugin 2.0.3 and earlier does not mask the AWS Secret Key on the global configuration form, increasing the potential for attackers to observe and capture it.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53654","description":"Jenkins Statistics Gatherer Plugin 2.0.3 and earlier stores the AWS Secret Key unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53653","description":"Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53651","description":"Jenkins HTML Publisher Plugin 425 and earlier displays log messages that include the absolute paths of files archived during the Publish HTML reports post-build step, exposing information about the Jenkins controller file system in the build log.","exploit_maturity":"No public exploit","published":"2025-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53602","description":"Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot Actuator), a similar issue to CVE-2025-48927.","exploit_maturity":"No public exploit","published":"2025-07-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53103","description":"JUnit is a testing framework for Java and the JVM. From version 5.12.0 to 5.13.1, JUnit's support for writing Open Test Reporting XML files can leak Git credentials. The impact depends on the level of the access token exposed through the OpenTestReportGeneratingListener. If these test reports are published or stored anywhere public, then there is the possibility that a rouge attacker can steal the token and perform elevated actions by impersonating the user or app. This issue as been patched in version 5.13.2.","exploit_maturity":"Proof of concept only","published":"2025-07-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53393","description":"In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics.","exploit_maturity":"No public exploit","published":"2025-06-28","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-5731","description":"A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found.","exploit_maturity":"No public exploit","published":"2025-06-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-53121","description":"Multiple stored XSS were found on different nodes with unsanitized parameters in OpenMNS Horizon 33.0.8 and versions earlier than 33.1.6 on multiple platforms that allow an attacker to store on database and then inject HTML and/or Javascript on the page. The solution is to upgrade to Horizon 33.1.6, 33.1.7 or Meridian 2024.2.6, 2024.2.7 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. OpenNMS thanks Fábio Tomé for reporting this issue.","exploit_maturity":"No public exploit","published":"2025-06-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-49574","description":"Quarkus is a Cloud Native, (Linux) Container First framework for writing Java applications. In versions prior to 3.24.1, 3.20.2, and 3.15.6, there is a potential data leak when duplicating a duplicated context. Quarkus extensively uses the Vert.x duplicated context to implement context propagation. With the new semantic data from one transaction can leak to the data from another transaction. From a Vert.x point of view, this new semantic clarifies the behavior. A significant amount of data is stored in the duplicated context, including request scope, security details, and metadata. Duplicating a duplicated context is rather rare and is only done in a few places. This issue has been patched in version 3.24.1, 3.20.2, and 3.15.6.","exploit_maturity":"No public exploit","published":"2025-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-3511","description":"An incorrect authorization vulnerability exists in multiple WSO2 products that allows unauthorized access to versioned files stored in the registry. Due to flawed authorization logic, a malicious actor with access to the management console can exploit a specific bypass method to retrieve versioned files without proper authorization.\n\nSuccessful exploitation of this vulnerability could lead to unauthorized disclosure of configuration or resource files that may be stored as registry versions, potentially aiding further attacks or system reconnaissance.","exploit_maturity":"No public exploit","published":"2025-06-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-48058","description":"PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to version 6.7.2, there is a potential polynomial Regular Expression Denial of Service (ReDoS) vulnerability in the PowSyBl's DataSource mechanism. If successfully exploited, a malicious actor can cause significant CPU consumption due to regex backtracking — even with polynomial patterns. This issue has been patched in com.powsybl:powsybl-commons: 6.7.2.","exploit_maturity":"No public exploit","published":"2025-06-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-32896","description":"# Summary\n\nUnauthorized users can perform Arbitrary File Read and Deserialization\nattack by submit job using restful api-v1.\n\n# Details\nUnauthorized users can access `/hazelcast/rest/maps/submit-job` to submit\njob.\nAn attacker can set extra params in mysql url to perform Arbitrary File\nRead and Deserialization attack.\n\nThis issue affects Apache SeaTunnel: \u003c=2.3.10\n\n# Fixed\n\nUsers are recommended to upgrade to version 2.3.11, and enable restful api-v2 \u0026 open https two-way authentication , which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-06-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-49587","description":"XWiki is an open-source wiki software platform. When a user without script right creates a document with an XWiki.Notifications.Code.NotificationDisplayerClass object, and later an admin edits and saves that document, the possibly malicious content of that object is output as raw HTML, allowing XSS attacks. While the notification displayer executes Velocity, the existing generic analyzer already warns admins before editing Velocity code. Note that warnings before editing documents with dangerous properties have only been introduced in XWiki 15.9, before that version, this was a known issue and the advice was simply to be careful. This vulnerability has been patched in XWiki 15.10.16, 16.4.7, and 16.10.2 by adding a required rights analyzer that warns the admin before editing about the possibly malicious code.","exploit_maturity":"Proof of concept only","published":"2025-06-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-49583","description":"XWiki is a generic wiki platform. When a user without script right creates a document with an `XWiki.Notifications.Code.NotificationEmailRendererClass` object, and later an admin edits and saves that document, the email templates in this object will be used for notifications. No malicious code can be executed, though, as while these templates allow Velocity code, the existing generic analyzer already warns admins before editing Velocity code. The main impact would thus be to send spam, e.g., with phishing links to other users or to hide notifications about other attacks. Note that warnings before editing documents with dangerous properties have only been introduced in XWiki 15.9, before that version, this was a known issue and the advice was simply to be careful. This has been patched in XWiki 16.10.2, 16.4.7 and 15.10.16 by adding an analysis for the respective XClass properties.","exploit_maturity":"Proof of concept only","published":"2025-06-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-46096","description":"Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component","exploit_maturity":"Proof of concept only","published":"2025-06-13","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-41234","description":"Description\n\nIn Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflected file download (RFD) attack when it sets a “Content-Disposition” header with a non-ASCII charset, where the filename attribute is derived from user-supplied input.\n\nSpecifically, an application is vulnerable when all the following are true:\n\n * The header is prepared with org.springframework.http.ContentDisposition.\n * The filename is set via ContentDisposition.Builder#filename(String, Charset).\n * The value for the filename is derived from user-supplied input.\n * The application does not sanitize the user-supplied input.\n * The downloaded content of the response is injected with malicious commands by the attacker (see RFD paper reference for details).\n\n\nAn application is not vulnerable if any of the following is true:\n\n * The application does not set a “Content-Disposition” response header.\n * The header is not prepared with org.springframework.http.ContentDisposition.\n * The filename is set via one of: * ContentDisposition.Builder#filename(String), or\n * ContentDisposition.Builder#filename(String, ASCII)\n\n\n\n * The filename is not derived from user-supplied input.\n * The filename is derived from user-supplied input but sanitized by the application.\n * The attacker cannot inject malicious content in the downloaded content of the response.\n\n\nAffected Spring Products and VersionsSpring Framework:\n\n * 6.2.0 - 6.2.7\n * 6.1.0 - 6.1.20\n * 6.0.5 - 6.0.28\n * Older, unsupported versions are not affected\n\n\nMitigationUsers of affected versions should upgrade to the corresponding fixed version.\n\nAffected version(s)Fix versionAvailability6.2.x6.2.8OSS6.1.x6.1.21OSS6.0.x6.0.29 Commercial https://enterprise.spring.io/ No further mitigation steps are necessary.\n\n\nCWE-113 in `Content-Disposition` handling in VMware Spring Framework versions 6.0.5 to 6.2.7 allows remote attackers to launch Reflected File Download (RFD) attacks via unsanitized user input in `ContentDisposition.Builder#filename(String, Charset)` with non-ASCII charsets.","exploit_maturity":"No public exploit","published":"2025-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-27505","description":"GeoServer is an open source server that allows users to share and edit geospatial data. It is possible to bypass the default REST API security and access the index page. The REST API security handles rest and its subpaths but not rest with an extension (e.g., rest.html). The REST API index can disclose whether certain extensions are installed. This vulnerability is fixed in 2.26.3 and 2.25.6. As a workaround, in ${GEOSERVER_DATA_DIR}/security/config.xml, change the paths for the rest filter to /rest.*,/rest/** and change the paths for the gwc filter to /gwc/rest.*,/gwc/rest/** and restart GeoServer.","exploit_maturity":"Working exploit published","published":"2025-06-10","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2024-40625","description":"GeoServer is an open source server that allows users to share and edit geospatial data. The Coverage rest api /workspaces/{workspaceName}/coveragestores/{storeName}/{method}.{format} allows attackers to upload files with a specified url (with {method} equals 'url') with no restrict. This vulnerability is fixed in 2.26.0.","exploit_maturity":"No public exploit","published":"2025-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-49128","description":"Jackson-core contains core low-level incremental (\"streaming\") parser and generator abstractions used by Jackson Data Processor. Starting in version 2.0.0 and prior to version 2.13.0, a flaw in jackson-core's `JsonLocation._appendSourceDesc` method allows up to 500 bytes of unintended memory content to be included in exception messages. When parsing JSON from a byte array with an offset and length, the exception message incorrectly reads from the beginning of the array instead of the logical payload start. This results in possible information disclosure in systems using pooled or reused buffers, like Netty or Vert.x. This issue was silently fixed in jackson-core version 2.13.0, released on September 30, 2021, via PR #652. All users should upgrade to version 2.13.0 or later. If upgrading is not immediately possible, applications can mitigate the issue by disabling exception message exposure to clients to avoid returning parsing exception messages in HTTP responses and/or disabling source inclusion in exceptions to prevent Jackson from embedding any source content in exception messages, avoiding leakage.","exploit_maturity":"Proof of concept only","published":"2025-06-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-49009","description":"Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 in `FacebookAuthFilter.java` results in a full request URL being logged during a failed request to a Facebook user profile. The log includes the user's access token in plain text. Since WARN-level logs are often retained in production and accessible to operators or log aggregation systems, this poses a risk of token exposure. Version 1.50.8 fixes the issue.","exploit_maturity":"No public exploit","published":"2025-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-46548","description":"If you enable Basic Authentication in Pekko Management using the Java DSL, the authenticator may not be properly applied.\n\n\nUsers that rely on authentication instead of making sure the Management API ports are only available to trusted users are recommended to upgrade to version 1.1.1, which fixes this issue.\n\n\n\n\nAkka was affected by the same issue and has released the fix in version 1.6.1.","exploit_maturity":"No public exploit","published":"2025-06-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-45855","description":"An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file.","exploit_maturity":"No public exploit","published":"2025-06-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-35036","description":"Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as of 6.2.0 and 7.0.0 no longer interpolates custom constraint violation messages with Expression Language and strongly recommends not allowing user-supplied input in constraint violation messages. CVE-2020-5245 and CVE-2025-4428 are examples of related, downstream vulnerabilities involving Expression Language intepolation of user-supplied data.","exploit_maturity":"Proof of concept only","published":"2025-06-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-48955","description":"Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 exposes both access and secret keys in logs without redaction. These credentials are later reused in variable assignments for persistence but do not require logging for debugging or system health purposes. Version 1.50.8 fixes the issue.","exploit_maturity":"No public exploit","published":"2025-06-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-8008","description":"A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to insufficient output encoding in error messages generated by the JDBC user store connection validation request. A malicious actor can inject a specially crafted payload into the request, causing the browser to execute arbitrary JavaScript in the context of the vulnerable page.\n\nThis vulnerability may allow UI manipulation, redirection to malicious websites, or data exfiltration from the browser. However, since all session-related sensitive cookies are protected with the httpOnly flag, session hijacking is not possible.","exploit_maturity":"No public exploit","published":"2025-06-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-7074","description":"An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user input in SOAP admin services. A malicious actor with administrative privileges can upload an arbitrary file to a user-controlled location on the server.\n\nBy leveraging this vulnerability, an attacker could upload a specially crafted payload, potentially achieving remote code execution (RCE) on the server. Exploitation requires valid admin credentials, limiting its impact to authorized but potentially malicious users.","exploit_maturity":"No public exploit","published":"2025-06-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-7073","description":"A server-side request forgery (SSRF) vulnerability exists in multiple WSO2 products due to improper input validation in SOAP admin services. This flaw allows unauthenticated attackers to manipulate server-side requests, enabling access to internal and external resources available through the network or filesystem.\n\nExploitation of this vulnerability could lead to unauthorized access to sensitive data and systems, including resources within private networks, as long as they are reachable by the affected product.","exploit_maturity":"No public exploit","published":"2025-06-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-3509","description":"A stored cross-site scripting (XSS) vulnerability exists in the Management Console of multiple WSO2 products due to insufficient input validation in the Rich Text Editor within the registry section.\nTo exploit this vulnerability, a malicious actor must have a valid user account with administrative access to the Management Console. If successful, the actor could inject persistent JavaScript payloads, enabling the theft of user data or execution of unauthorized actions on behalf of other users.\n\nWhile this issue enables persistent client-side script execution, session-related cookies remain protected with the httpOnly flag, preventing session hijacking.","exploit_maturity":"No public exploit","published":"2025-06-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-1440","description":"An open redirection vulnerability exists in multiple WSO2 products due to improper validation of the multi-option URL in the authentication endpoint when multi-option authentication is enabled. A malicious actor can craft a valid link that redirects users to an attacker-controlled site.\n\nBy exploiting this vulnerability, an attacker may trick users into visiting a malicious page, enabling phishing attacks to harvest sensitive information or perform other harmful actions.","exploit_maturity":"No public exploit","published":"2025-06-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-7096","description":"A privilege escalation vulnerability exists in multiple WSO2 products due to a business logic flaw in SOAP admin services. A malicious actor can create a new user with elevated permissions only when all of the following conditions are met:\n * SOAP admin services are accessible to the attacker.\n * The deployment includes an internally used attribute that is not part of the default WSO2 product configuration.\n * At least one custom role exists with non-default permissions.\n * The attacker has knowledge of the custom role and the internal attribute used in the deployment.\n\n\nExploiting this vulnerability allows malicious actors to assign higher privileges to self-registered users, bypassing intended access control mechanisms.","exploit_maturity":"No public exploit","published":"2025-05-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-27526","description":"Deserialization of Untrusted Data vulnerability in Apache InLong.\n\nThis issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncdoe and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it.\n\n[1]  https://github.com/apache/inlong/pull/11747","exploit_maturity":"No public exploit","published":"2025-05-28","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-27522","description":"Deserialization of Untrusted Data vulnerability in Apache InLong.\n\nThis issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it.\n\n[1] \n\n https://github.com/apache/inlong/pull/11732","exploit_maturity":"No public exploit","published":"2025-05-28","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-7487","description":"An improper authentication vulnerability exists in WSO2 Identity Server 7.0.0 due to an implementation flaw that allows app-native authentication to be bypassed when an invalid object is passed.\n\nExploitation of this vulnerability could enable malicious actors to circumvent the client verification mechanism, compromising the integrity of the authentication process.","exploit_maturity":"No public exploit","published":"2025-05-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-4949","description":"In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This vulnerability can lead to information disclosure, denial of service, and other security issues.","exploit_maturity":"Proof of concept only","published":"2025-05-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-48063","description":"XWiki is a generic wiki platform. In XWiki 16.10.0, required rights were introduced as a way to limit which rights a document can have. Part of the security model of required rights is that a user who doesn't have a right also cannot define that right as required right. That way, users who are editing documents on which required rights are enforced can be sure that they're not giving a right to a script or object that it didn't have before. A bug in the implementation of the enforcement of this rule means that in fact, it was possible for any user with edit right on a document to set programming right as required right. If then a user with programming right edited that document, the content of that document would gain programming right, allowing remote code execution. This thereby defeats most of the security benefits of required rights. As XWiki still performs the required rights analysis when a user edits a page even when required rights are enforced, the user with programming right would still be warned about the dangerous content unless the attacker managed to bypass this check. Note also that none of the affected versions include a UI for enabling the enforcing of required rights so it seems unlikely that anybody relied on them for security in the affected versions. As this vulnerability provides no additional attack surface unless all documents in the wiki enforce required rights, we consider the impact of this attack to be low even though gaining programming right could have a high impact. This vulnerability has been patched in XWiki 16.10.4 and 17.1.0RC1. No known workarounds are available except for upgrading.","exploit_maturity":"Proof of concept only","published":"2025-05-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-47888","description":"Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks.","exploit_maturity":"No public exploit","published":"2025-05-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-47887","description":"Missing permission checks in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password.","exploit_maturity":"No public exploit","published":"2025-05-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-47886","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password.","exploit_maturity":"No public exploit","published":"2025-05-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-46392","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x.\n\nThere are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuration team does not intend to fix these issues in 1.x. Apache Commons Configuration 1.x is still safe to use in scenario's where you only load trusted configurations. \n\n\nUsers that load untrusted configurations or give attackers control over usage patterns are recommended to upgrade to the 2.x version line, which fixes these issues. Apache Commons Configuration 2.x is not a drop-in replacement, but as it uses a separate Maven groupId and Java package namespace they can be loaded side-by-side, making it possible to do a gradual migration.","exploit_maturity":"No public exploit","published":"2025-05-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-46551","description":"JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library. Starting in JRuby-OpenSSL version 0.12.1 and prior to version 0.15.4 (corresponding to JRuby versions starting in 9.3.4.0 prior to 9.4.12.1 and 10.0.0.0 prior to 10.0.0.1), when verifying SSL certificates, JRuby-OpenSSL does not verify that the hostname presented in the certificate matches the one the user tries to connect to. This means a man-in-the-middle could just present any valid cert for a completely different domain they own, and JRuby would accept the cert. Anybody using JRuby to make requests of external APIs, or scraping the web, that depends on https to connect securely. JRuby-OpenSSL version 0.15.4 contains a fix for the issue. This fix is included in JRuby versions 10.0.0.1 and 9.4.12.1.","exploit_maturity":"Proof of concept only","published":"2025-05-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-27533","description":"Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ.\n\nDuring unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker when not using mutual TLS connections.\nThis issue affects Apache ActiveMQ: from 6.0.0 before 6.1.6, from 5.18.0 before 5.18.7, from 5.17.0 before 5.17.7, before 5.16.8. ActiveMQ 5.19.0 is not affected.\n\nUsers are recommended to upgrade to version 6.1.6+, 5.19.0+, 5.18.7+, 5.17.7, or 5.16.8 or which fixes the issue.\n\nExisting users may implement mutual TLS to mitigate the risk on affected brokers.","exploit_maturity":"Working exploit published","published":"2025-05-07","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-4388","description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the modules/apps/marketplace/marketplace-app-manager-web.","exploit_maturity":"Working exploit published","published":"2025-05-06","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-46554","description":"XWiki is a generic wiki platform. In versions starting from 1.8.1 to before 14.10.22, from 15.0-rc-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to before 16.7.0, anyone can access the metadata of any attachment in the wiki using the wiki attachment REST endpoint. There is no filtering for the results depending on current user rights, meaning an unauthenticated user could exploit this even in a private wiki. This issue has been patched in versions 14.10.22, 15.10.12, 16.4.3, and 16.7.0.","exploit_maturity":"Working exploit published","published":"2025-04-30","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-32972","description":"XWiki is a generic wiki platform. In versions starting from 6.1-milestone-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to before 16.8.0-rc-1, the script API of the LESS compiler in XWiki is incorrectly checking for rights when calling the cache cleaning API, making it possible to clean the cache without having programming right. The only impact of this is a slowdown in XWiki execution as the caches are re-filled. As this vulnerability requires script right to exploit, and script right already allows unlimited execution of scripts, the additional impact due to this vulnerability is low. This issue has been patched in versions 15.10.12, 16.4.3, and 16.8.0-rc-1.","exploit_maturity":"Proof of concept only","published":"2025-04-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-32970","description":"XWiki is a generic wiki platform. In versions starting from 13.5-rc-1 to before 15.10.13, from 16.0.0-rc-1 to before 16.4.4, and from 16.5.0-rc-1 to before 16.8.0, an open redirect vulnerability in the HTML conversion request filter allows attackers to construct URLs on an XWiki instance that redirects to any URL. This issue has been patched in versions 15.10.13, 16.4.4, and 16.8.0.","exploit_maturity":"Working exploit published","published":"2025-04-30","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-3910","description":"A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication.","exploit_maturity":"No public exploit","published":"2025-04-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-3986","description":"A vulnerability was found in Apereo CAS 5.2.6. It has been declared as problematic. This vulnerability affects unknown code of the file cas-5.2.6\\core\\cas-server-core-configuration-metadata-repository\\src\\main\\java\\org\\apereo\\cas\\metadata\\rest\\CasConfigurationMetadataServerController.java. The manipulation of the argument Name leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","exploit_maturity":"No public exploit","published":"2025-04-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-3985","description":"A vulnerability was found in Apereo CAS 5.2.6. It has been classified as problematic. This affects the function ResponseEntity of the file cas-5.2.6\\webapp-mgmt\\cas-management-webapp-support\\src\\main\\java\\org\\apereo\\cas\\mgmt\\services\\web\\ManageRegisteredServicesMultiActionController.java. The manipulation of the argument Query leads to inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","exploit_maturity":"No public exploit","published":"2025-04-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-32961","description":"The Cuba JPA web API enables loading and saving any entities defined in the application data model by sending simple HTTP requests. Prior to version 1.1.1, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with .html. This could allow malicious JavaScript code to be executed in the browser. For a successful attack, a malicious file needs to be uploaded beforehand. This issue has been patched in version 1.1.1. A workaround is provided on the Jmix documentation website.","exploit_maturity":"No public exploit","published":"2025-04-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-32960","description":"The CUBA REST API add-on performs operations on data and entities. Prior to version 7.2.7, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with .html. This could allow malicious JavaScript code to be executed in the browser. For a successful attack, a malicious file needs to be uploaded beforehand. This issue has been patched in version 7.2.7. A workaround is provided on the Jmix documentation website.","exploit_maturity":"No public exploit","published":"2025-04-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-32959","description":"CUBA Platform is a high level framework for enterprise applications development. Prior to version 7.2.23, the local file storage implementation does not restrict the size of uploaded files. An attacker could exploit this by uploading excessively large files, potentially causing the server to run out of space and return HTTP 500 error, resulting in a denial of service. This issue has been patched in version 7.2.23. A workaround is provided on the Jmix documentation website.","exploit_maturity":"No public exploit","published":"2025-04-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-32952","description":"Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the local file storage implementation does not restrict the size of uploaded files. An attacker could exploit this by uploading excessively large files, potentially causing the server to run out of space and return HTTP 500 error, resulting in a denial of service. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website.","exploit_maturity":"No public exploit","published":"2025-04-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-32951","description":"Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with .html. This could allow malicious JavaScript code to be executed in the browser. For a successful attack, a malicious file needs to be uploaded beforehand. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website.","exploit_maturity":"No public exploit","published":"2025-04-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-32950","description":"Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, attackers could manipulate the FileRef parameter to access files on the system where the Jmix application is deployed, provided the application server has the necessary permissions. This can be accomplished either by modifying the FileRef directly in the database or by supplying a harmful value in the fileRef parameter of the `/files` endpoint of the generic REST API. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website.","exploit_maturity":"No public exploit","published":"2025-04-22","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-27907","description":"IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.","exploit_maturity":"No public exploit","published":"2025-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-42699","description":"Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript payload via image title sub-field in the image field","exploit_maturity":"Proof of concept only","published":"2025-04-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-41446","description":"A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function.","exploit_maturity":"Proof of concept only","published":"2025-04-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-41447","description":"A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the author parameter under the Create/Modify article function.","exploit_maturity":"Proof of concept only","published":"2025-04-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-3760","description":"A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal 7.2.0 through 7.4.3.129, and Liferay DXP 2024.Q4.1 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, 7.3 GA through update 36, and 7.2 GA through fix pack 20 allows remote authenticated attackers to inject malicious JavaScript into a page.","exploit_maturity":"No public exploit","published":"2025-04-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-32783","description":"XWiki Platform is a generic wiki platform. A vulnerability in versions from 5.0 to 16.7.1 affects users with Message Stream enabled and a wiki configured as closed from selecting \"Prevent unregistered users to view pages\" in the Administrations Rights. The vulnerability is that any message sent in a subwiki to \"everyone\" is actually sent to the farm: any visitor of the main wiki will be able to see that message through the Dashboard, even if the subwiki is configured to be private. This issue will not be patched as Message Stream has been deprecated in XWiki 16.8.0RC1 and is not maintained anymore. A workaround for this issue involves keeping Message Stream disabled by default. It's advised to keep it disabled from Administration \u003e Social \u003e Message Stream.","exploit_maturity":"Proof of concept only","published":"2025-04-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-24911","description":"Overview \n\n\n\n \n\n\n\nXML documents optionally contain a Document Type Definition (DTD), which, among other features, enables the definition of XML entities. It is possible to define an entity by providing a substitution string in the form of a URI. Once the content of the URI is read, it is fed back into the application that is processing the XML. This application may echo back the data (e.g. in an error message), thereby exposing the file contents. (CWE-611) \n\n\n\n \n\n\n\nDescription \n\n\n\n \n\n\n\nHitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.2, including 9.3.x and 8.3.x, do not correctly protect Data Access XMLParserFactoryProducer against out-of-band XML External Entity Reference. \n\n\n\n \n\n\n\nImpact \n\n\n\n \n\n\n\nBy submitting an XML file that defines an external entity with a file:// URI, an attacker can cause the processing application to read the contents of a local file. Using URIs with other schemes such as http://, the attacker can force the application to make outgoing requests to servers that the attacker cannot reach directly, which can be used to bypass firewall restrictions or hide the source of attacks such as port scanning.","exploit_maturity":"No public exploit","published":"2025-04-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-24910","description":"Overview \n\n\n\n \n\n\n\nXML documents optionally contain a Document Type Definition (DTD), which, among other features, enables the definition of XML entities. It is possible to define an entity by providing a substitution string in the form of a URI. Once the content of the URI is read, it is fed back into the application that is processing the XML. This application may echo back the data (e.g. in an error message), thereby exposing the file contents. (CWE-611) \n\n\n\n \n\n\n\nDescription \n\n\n\n \n\n\n\nHitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.2, including 9.3.x and 8.3.x, do not correctly protect Pentaho Data Integration MessageSourceCrawler against out-of-band XML External Entity Reference. \n\n\n\n \n\n\n\nImpact \n\n\n\n \n\n\n\nBy submitting an XML file that defines an external entity with a file:// URI, an attacker can cause the processing application to read the contents of a local file. Using URIs with other schemes such as http://, the attacker can force the application to make outgoing requests to servers that the attacker cannot reach directly, which can be used to bypass firewall restrictions or hide the source of attacks such as port scanning.","exploit_maturity":"No public exploit","published":"2025-04-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-24909","description":"Overview \n\n\n\n \n\n\n\nThe software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users. (CWE-79) \n\n\n\n \n\n\n\nDescription \n\n\n\n \n\n\n\nHitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, allow a malicious URL to inject content into the Analyzer plugin interface. \n\n\n\n \n\n\n\nImpact \n\n\n\n \n\n\n\nOnce the malicious script is injected, the attacker can perform a variety of malicious activities. The attacker could transfer private information, such as cookies that may include session information, from the victim's machine to the attacker. The attacker could send malicious requests to a web site on behalf of the victim, which could be especially dangerous to the site if the victim has administrator privileges to manage that site.","exploit_maturity":"No public exploit","published":"2025-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-24908","description":"Overview \n\n\n\n \n\n\n\nThe product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory. (CWE-35) \n\n\n\n \n\n\n\nDescription \n\n\n\n \n\n\n\nHitachi Vantara Pentaho Data Integration \u0026 Analytics versions before 10.2.0.2, including 9.3.x and 8.3.x, do not sanitize a user input used as a file path through the UploadFile service. \n\n\n\n \n\n\n\nImpact \n\n\n\n \n\n\n\nThis allows attackers to traverse the file system to access files or directories that are outside of the restricted directory.","exploit_maturity":"No public exploit","published":"2025-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-24907","description":"Overview \n\n\n\n \n\n\n\nThe product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory. (CWE-35) \n\n\n\n \n\n\n\nDescription \n\n\n\n \n\n\n\nHitachi Vantara Pentaho Data Integration \u0026 Analytics versions before 10.2.0.2, including 9.3.x and 8.3.x, do not sanitize a user input used as a file path through the CGG Draw API. \n\n\n\n \n\n\n\nImpact \n\n\n\n \n\n\n\nThis allows attackers to traverse the file system to access files or directories that are outside of the restricted directory.","exploit_maturity":"No public exploit","published":"2025-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-0758","description":"Overview \n\n\n\nThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. (CWE-732) \n\n\n\nDescription \n\n\n\nHitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, is installed with Karaf JMX beans enabled and accessible by default. \n\n\n\nImpact \n\n\n\nWhen the vulnerability is leveraged, a user with local execution privileges can access functionality exposed by Karaf beans contained in the product.","exploit_maturity":"No public exploit","published":"2025-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-0757","description":"Overview\n\n\n\n \n\n\n\nThe software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users. (CWE-79) \n\n\n\n \n\n\n\nDescription \n\n\n\n \n\n\n\nHitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, allow a malicious URL to inject content into the Analyzer plugin interface. \n\n\n\n \n\n\n\nImpact \n\n\n\n \n\n\n\nOnce the malicious script is injected, the attacker can perform a variety of malicious activities. The attacker could transfer private information, such as cookies that may include session information, from the victim's machine to the attacker. The attacker could send malicious requests to a web site on behalf of the victim, which could be especially dangerous to the site if the victim has administrator privileges to manage that site.","exploit_maturity":"No public exploit","published":"2025-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30740","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30737","description":"Vulnerability in the Oracle Smart View for Office product of Oracle Hyperion (component: Core Smart View). The supported version that is affected is 24.200. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Smart View for Office. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Smart View for Office accessible data as well as unauthorized access to critical data or complete access to all Oracle Smart View for Office accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30732","description":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Object Library, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data as well as unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30729","description":"Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security). Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Order and Service Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Order and Service Management accessible data as well as unauthorized read access to a subset of Oracle Communications Order and Service Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Order and Service Management. CVSS 3.1 Base Score 5.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30726","description":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30723","description":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services). Supported versions that are affected are 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle BI Publisher. CVSS 3.1 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30720","description":"Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Orders). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Configurator, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Configurator accessible data as well as unauthorized read access to a subset of Oracle Configurator accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30718","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data as well as unauthorized read access to a subset of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30717","description":"Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Diagnostics Scripts). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Teleservice. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Teleservice accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30713","description":"Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSoft (component: Job Opening). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Talent Acquisition Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HCM Talent Acquisition Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Talent Acquisition Manager accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Talent Acquisition Manager accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30711","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data as well as unauthorized read access to a subset of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30709","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30698","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK: 17.0.14, 21.0.6, 24; Oracle GraalVM Enterprise Edition: 20.3.17 and 21.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30697","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30692","description":"Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 12.2.7-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSupplier Portal. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iSupplier Portal accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-30691","description":"Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and 24. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21586","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21582","description":"Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data as well as unauthorized read access to a subset of Oracle CRM Technical Foundation accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21576","description":"Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Personalization Server). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Platform accessible data as well as unauthorized read access to a subset of Oracle Commerce Platform accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21573","description":"Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Chatbot). Supported versions that are affected are 5.1.0.0.0, 6.1.0.0.0 and 7.0.0.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Financial Services Revenue Management and Billing. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Financial Services Revenue Management and Billing accessible data as well as unauthorized access to critical data or complete access to all Oracle Financial Services Revenue Management and Billing accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Financial Services Revenue Management and Billing. CVSS 3.1 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L).","exploit_maturity":"No public exploit","published":"2025-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-3588","description":"A vulnerability, which was classified as problematic, has been found in joelittlejohn jsonschema2pojo 1.2.2. This issue affects the function apply of the file org/jsonschema2pojo/rules/SchemaRule.java of the component JSON File Handler. The manipulation leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","exploit_maturity":"Proof of concept only","published":"2025-04-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-31672","description":"Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names (including the path) in the zip. In this case, products reading the affected file could read different data because 1 of the zip entries with the duplicate name is selected over another but different products may choose a different zip entry.\nThis issue affects Apache POI poi-ooxml before 5.4.0. poi-ooxml 5.4.0 has a check that throws an exception if zip entries with duplicate file names are found in the input file.\nUsers are recommended to upgrade to version poi-ooxml 5.4.0, which fixes the issue. Please read https://poi.apache.org/security.html for recommendations about how to use the POI libraries securely.","exploit_maturity":"No public exploit","published":"2025-04-09","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-30677","description":"Apache Pulsar contains multiple connectors for integrating with Apache Kafka. The Pulsar IO Apache Kafka Source Connector, Sink Connector, and Kafka Connect Adaptor Sink Connector log sensitive configuration properties in plain text in application logs.\n\n\nThis vulnerability can lead to unintended exposure of credentials in log files, potentially allowing attackers with access to these logs to obtain Apache Kafka credentials. The vulnerability's impact is limited by the fact that an attacker would need access to the application logs to exploit this issue.\n\nThis issue affects Apache Pulsar IO's Apache Kafka connectors in all versions before 3.0.11, 3.3.6, and 4.0.4.\n\n\n3.0.x version users should upgrade to at least 3.0.11.\n\n3.3.x version users should upgrade to at least 3.3.6.\n\n4.0.x version users should upgrade to at least 4.0.4.\n\n\nUsers operating versions prior to those listed above should upgrade to the aforementioned patched versions or newer versions.","exploit_maturity":"No public exploit","published":"2025-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-27391","description":"Insertion of Sensitive Information into Log File vulnerability in Apache ActiveMQ Artemis. All the values of the broker properties are logged when the org.apache.activemq.artemis.core.config.impl.ConfigurationImpl logger has the debug level enabled.\n\nThis issue affects Apache ActiveMQ Artemis: from 1.5.1 before 2.40.0. It can be mitigated by restricting log access to only trusted users.\n\nUsers are recommended to upgrade to version 2.40.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-52980","description":"A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class could cause the Elasticsearch node to crash.\n\nA successful attack requires a malicious user to have read_pipeline Elasticsearch cluster privilege assigned to them.","exploit_maturity":"No public exploit","published":"2025-04-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-30373","description":"Graylog is a free and open log management platform. Starting with 6.1, HTTP Inputs can be configured to check if a specified header is present and has a specified value to authenticate HTTP-based ingestion. Unfortunately, even though in cases of a missing header or a wrong value the correct HTTP response (401) is returned, the message will be ingested nonetheless. To mitigate the vulnerability, disable http-based inputs and allow only authenticated pull-based inputs. This vulnerability is fixed in 6.1.9.","exploit_maturity":"No public exploit","published":"2025-04-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-2251","description":"A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted serialized object, leading to remote code execution without requiring authentication.","exploit_maturity":"No public exploit","published":"2025-04-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-31728","description":"Jenkins AsakusaSatellite Plugin 0.1.1 and earlier does not mask AsakusaSatellite API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2025-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-31727","description":"Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-31726","description":"Jenkins Stack Hammer Plugin 1.0.6 and earlier stores Stack Hammer API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-31725","description":"Jenkins monitor-remote-job Plugin 1.0 stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-31724","description":"Jenkins Cadence vManager Plugin 4.0.0-282.v5096a_c2db_275 and earlier stores Verisium Manager vAPI keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2025-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-31723","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Simple Queue Plugin 1.4.6 and earlier allows attackers to change and reset the build queue order.","exploit_maturity":"No public exploit","published":"2025-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-31721","description":"A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Configure permission to copy an agent, gaining access to encrypted secrets in its configuration.","exploit_maturity":"No public exploit","published":"2025-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-31720","description":"A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Extended Read permission to copy an agent, gaining access to its configuration.","exploit_maturity":"No public exploit","published":"2025-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-30177","description":"Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions.\n\nThis issue affects Apache Camel: from 4.10.0 before 4.10.3, from 4.8.0 before 4.8.6.\n\nUsers are recommended to upgrade to version 4.10.3 for 4.10.x LTS and 4.8.6 for 4.8.x LTS.\n\nCamel undertow component is vulnerable to Camel message header injection, in particular the custom header filter strategy used by the component only filter the \"out\" direction, while it doesn't filter the \"in\" direction.\n\n\nThis allows an attacker to include Camel specific headers that for some Camel components can alter the behaviour such as the camel-bean component, or the camel-exec component.","exploit_maturity":"No public exploit","published":"2025-04-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-29908","description":"Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability (in the hash map used to manage connections) allows remote attackers to cause a considerable CPU load on the server (a Hash DoS attack) by initiating connections with colliding Source Connection IDs (SCIDs). This vulnerability is fixed in 0.0.71.Final.","exploit_maturity":"No public exploit","published":"2025-03-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-2961","description":"A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function render_mav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.","exploit_maturity":"Proof of concept only","published":"2025-03-30","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-6875","description":"A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API.","exploit_maturity":"No public exploit","published":"2025-03-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-48944","description":"Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. Through a kylin server, an attacker may forge a request to invoke \"/kylin/api/xxx/diag\" api on another internal host and possibly get leaked information. There are two preconditions: 1) The attacker has got admin access to a kylin server; 2) Another internal host has the \"/kylin/api/xxx/diag\" api\n\nendpoint open for service.\n\n\nThis issue affects Apache Kylin: from 5.0.0 \nthrough \n\n5.0.1.\n\nUsers are recommended to upgrade to version 5.0.2, which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-03-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-2559","description":"A flaw was found in Keycloak. When the configuration uses JWT tokens for authentication, the tokens are cached until expiration. If a client uses JWT tokens with an excessively long expiration time, for example, 24 or 48 hours, the cache can grow indefinitely, leading to an OutOfMemoryError. This issue could result in a denial of service condition, preventing legitimate users from accessing the system.","exploit_maturity":"No public exploit","published":"2025-03-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-22223","description":"Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. This may cause an authorization bypass. \n\nYou are not affected if you are not using @EnableMethodSecurity, or\nyou do not have method security annotations on parameterized types or methods, or all method security annotations are attached to target methods","exploit_maturity":"No public exploit","published":"2025-03-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-30474","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Commons VFS.\n\nThe FtpFileObject class can throw an exception when a file is not found, revealing the original URI in its message, which may include a password. The fix is to mask the password in the exception message\nThis issue affects Apache Commons VFS: before 2.10.0.\n\nUsers are recommended to upgrade to version 2.10.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-03-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-26796","description":"** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Oozie.\n\nThis issue affects Apache Oozie: all versions.\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.","exploit_maturity":"No public exploit","published":"2025-03-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-2622","description":"A vulnerability was found in aizuda snail-job 1.4.0. It has been classified as critical. Affected is the function getRuntime of the file /snail-job/workflow/check-node-expression of the component Workflow-Task Management Module. The manipulation of the argument nodeExpression leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.","exploit_maturity":"Proof of concept only","published":"2025-03-22","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-27888","description":"Severity: medium (5.8) / important\n\nServer-Side Request Forgery (SSRF), Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Druid.\n\nThis issue affects all previous Druid versions.\n\n\nWhen using the Druid management proxy, a request that has a specially crafted URL could be used to redirect the request to an arbitrary server instead. This has the potential for XSS or XSRF. The user is required to be authenticated for this exploit. The management proxy is enabled in Druid's out-of-box configuration. It may be disabled to mitigate this vulnerability. If the management proxy is disabled, some web console features will not work properly, but core functionality is unaffected.\n\n\nUsers are recommended to upgrade to Druid 31.0.2 or Druid 32.0.1, which fixes the issue.","exploit_maturity":"Working exploit published","published":"2025-03-20","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2025-2565","description":"The data exposure vulnerability in Liferay Portal 7.4.0 through 7.4.3.126, and Liferay DXP 2024.Q3.0, 2024.Q2.0 through 2024.Q2.12, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92 allows an unauthorized user to obtain entry data from forms.","exploit_maturity":"No public exploit","published":"2025-03-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-6863","description":"In h2oai/h2o-3 version 3.46.0, an endpoint exposing a custom EncryptionTool allows an attacker to encrypt any files on the target server with a key of their choosing. The chosen key can also be overwritten, resulting in ransomware-like behavior. This vulnerability makes it possible for an attacker to encrypt arbitrary files with keys of their choice, making it exceedingly difficult for the target to recover the keys needed for decryption.","exploit_maturity":"Proof of concept only","published":"2025-03-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-54016","description":"Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Seata (incubating).\n\nThis issue affects Apache Seata (incubating): through \u003c=2.2.0.\n\nUsers are recommended to upgrade to version 2.3.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-03-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-30196","description":"Jenkins AnchorChain Plugin 1.0 does not limit URL schemes for links it creates based on workspace content, allowing the `javascript:` scheme, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control the input file for the Anchor Chain post-build step.","exploit_maturity":"No public exploit","published":"2025-03-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-2536","description":"Cross-site scripting (XSS) vulnerability on Liferay Portal 7.4.3.82 through 7.4.3.128, and Liferay DXP 2024.Q3.0, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 update 82 through update 92 in the Frontend JS module's layout-taglib/__liferay__/index.js allows remote attackers to inject arbitrary web script or HTML via toastData parameter","exploit_maturity":"No public exploit","published":"2025-03-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-58103","description":"Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt.","exploit_maturity":"No public exploit","published":"2025-03-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-36843","description":"The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA (Strong Existential Unforgeability under Chosen Message Attacks) property. This allows attackers to create new valid signatures different from previous signatures for a known message.","exploit_maturity":"No public exploit","published":"2025-03-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-29891","description":"Bypass/Injection vulnerability in Apache Camel.\n\nThis issue affects Apache Camel: from 4.10.0 before 4.10.2, from 4.8.0 before 4.8.5, from 3.10.0 before 3.22.4.\n\nUsers are recommended to upgrade to version 4.10.2 for 4.10.x LTS, 4.8.5 for 4.8.x LTS and 3.22.4 for 3.x releases.\n\nThis vulnerability is present in Camel's default incoming header filter, that allows an attacker to include Camel specific headers that for some Camel components can alter the behaviours such as the camel-bean component, or the camel-exec component.\n\nIf you have Camel applications that are directly connected to the internet via HTTP, then an attacker could include parameters in the HTTP requests that are sent to the Camel application that get translated into headers. \n\nThe headers could be both provided as request parameters for an HTTP methods invocation or as part of the payload of the HTTP methods invocation.\n\nAll the known Camel HTTP component such as camel-servlet, camel-jetty, camel-undertow, camel-platform-http, and camel-netty-http would be vulnerable out of the box.\n\nThis CVE is related to the CVE-2025-27636: while they have the same root cause and are fixed with the same fix, CVE-2025-27636 was assumed to only be exploitable if an attacker could add malicious HTTP headers, while we have now determined that it is also exploitable via HTTP parameters. Like in CVE-2025-27636, exploitation is only possible if the Camel route uses particular vulnerable components.","exploit_maturity":"Proof of concept only","published":"2025-03-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-27867","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Felix HTTP Webconsole Plugin.\n\nThis issue affects Apache Felix HTTP Webconsole Plugin: from Version 1.X through 1.2.0.\n\nUsers are recommended to upgrade to version 1.2.2, which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-03-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-27017","description":"Apache NiFi 1.13.0 through 2.2.0 includes the username and password used to authenticate with MongoDB in the NiFi provenance events that MongoDB components generate during processing. An authorized user with read access to the provenance events of those processors may see the credentials information. Upgrading to Apache NiFi 2.3.0 is the recommended mitigation, which removes the credentials from provenance event records.","exploit_maturity":"No public exploit","published":"2025-03-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-27136","description":"LocalS3 is an Amazon S3 mock service for testing and local development. Prior to version 1.21, the LocalS3 service's bucket creation endpoint is vulnerable to XML External Entity (XXE) injection. When processing the CreateBucketConfiguration XML document during bucket creation, the service's XML parser is configured to resolve external entities. This allows an attacker to declare an external entity that references an internal URL, which the server will then attempt to fetch when parsing the XML. The vulnerability specifically occurs in the location constraint processing, where the XML parser resolves external entities without proper validation or restrictions. When the external entity is resolved, the server makes an HTTP request to the specified URL and includes the response content in the parsed XML document. This vulnerability can be exploited to perform server-side request forgery (SSRF) attacks, allowing an attacker to make requests to internal services or resources that should not be accessible from external networks. The server will include the responses from these internal requests in the resulting bucket configuration, effectively leaking sensitive information. The attacker only needs to be able to send HTTP requests to the LocalS3 service to exploit this vulnerability.","exploit_maturity":"Proof of concept only","published":"2025-03-10","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-27636","description":"Bypass/Injection vulnerability in Apache Camel components under particular conditions.\n\nThis issue affects Apache Camel: from 4.10.0 through \u003c= 4.10.1, from 4.8.0 through \u003c= 4.8.4, from 3.10.0 through \u003c= 3.22.3.\n\nUsers are recommended to upgrade to version 4.10.2 for 4.10.x LTS, 4.8.5 for 4.8.x LTS and 3.22.4 for 3.x releases.\n\n\n\nThis vulnerability is present in Camel's default incoming header filter, that allows an attacker to include Camel specific\n\nheaders that for some Camel components can alter the behaviours such as the camel-bean component, to call another method\n\non the bean, than was coded in the application. In the camel-jms component, then a malicious header can be used to send\n\nthe message to another queue (on the same broker) than was coded in the application. This could also be seen by using the camel-exec component\n\n\n\n\nThe attacker would need to inject custom headers, such as HTTP protocols. So if you have Camel applications that are\n\ndirectly connected to the internet via HTTP, then an attacker could include malicious HTTP headers in the HTTP requests\n\nthat are send to the Camel application.\n\n\n\n\nAll the known Camel HTTP component such as camel-servlet, camel-jetty, camel-undertow, camel-platform-http, and camel-netty-http would be vulnerable out of the box.\n\nIn these conditions an attacker could be able to forge a Camel header name and make the bean component invoking other methods in the same bean.\n\nIn terms of usage of the default header filter strategy the list of components using that is: \n\n\n * camel-activemq\n * camel-activemq6\n * camel-amqp\n * camel-aws2-sqs\n * camel-azure-servicebus\n * camel-cxf-rest\n * camel-cxf-soap\n * camel-http\n * camel-jetty\n * camel-jms\n * camel-kafka\n * camel-knative\n * camel-mail\n * camel-nats\n * camel-netty-http\n * camel-platform-http\n * camel-rest\n * camel-sjms\n * camel-spring-rabbitmq\n * camel-stomp\n * camel-tahu\n * camel-undertow\n * camel-xmpp\n\n\n\n\n\n\nThe vulnerability arises due to a bug in the default filtering mechanism that only blocks headers starting with \"Camel\", \"camel\", or \"org.apache.camel.\". \n\n\nMitigation: You can easily work around this in your Camel applications by removing the headers in your Camel routes. There are many ways of doing this, also globally or per route. This means you could use the removeHeaders EIP, to filter out anything like \"cAmel, cAMEL\" etc, or in general everything not starting with \"Camel\", \"camel\" or \"org.apache.camel.\".","exploit_maturity":"Proof of concept only","published":"2025-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-27625","description":"In Jenkins 2.499 and earlier, LTS 2.492.1 and earlier, redirects starting with backslash (`\\`) characters are considered safe, allowing attackers to perform phishing attacks by having users go to a Jenkins URL that will forward them to a different site, because browsers interpret these characters as part of scheme-relative redirects.","exploit_maturity":"No public exploit","published":"2025-03-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-27624","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins 2.499 and earlier, LTS 2.492.1 and earlier allows attackers to have users toggle their collapsed/expanded status of sidepanel widgets (e.g., Build Queue and Build Executor Status widgets).","exploit_maturity":"No public exploit","published":"2025-03-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-27623","description":"Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing `config.xml` of views via REST API or CLI, allowing attackers with View/Read permission to view encrypted values of secrets.","exploit_maturity":"No public exploit","published":"2025-03-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-27622","description":"Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing `config.xml` of agents via REST API or CLI, allowing attackers with Agent/Extended Read permission to view encrypted values of secrets.","exploit_maturity":"No public exploit","published":"2025-03-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-24778","description":"Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know. \n\n\n\n\n\nThis issue affects Apache StreamPipes: through 0.95.1.\n\nUsers are recommended to upgrade to version 0.97.0 which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-03-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-1686","description":"Versions of the package io.pebbletemplates:pebble from 0 and before 4.1.0 are vulnerable to External Control of File Name or Path via the include tag. A high privileged attacker can access sensitive local files by crafting malicious notification templates that leverage this tag to include files like /etc/passwd or /proc/1/environ.\r\r Workaround\r\rThis vulnerability can be mitigated by disabling the include macro in Pebble Templates:\r\rjava\rnew PebbleEngine.Builder()\r .registerExtensionCustomizer(new DisallowExtensionCustomizerBuilder()\r .disallowedTokenParserTags(List.of(\"include\"))\r .build())\r .build();","exploit_maturity":"Proof of concept only","published":"2025-02-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-2321","description":"An incorrect authorization vulnerability exists in multiple WSO2 products, allowing protected APIs to be accessed directly using a refresh token instead of the expected access token. Due to improper authorization checks and token mapping, session cookies are not required for API access, potentially enabling unauthorized operations.\n\nExploitation requires an attacker to obtain a valid refresh token of an admin user. Since refresh tokens generally have a longer expiration time, this could lead to prolonged unauthorized access to API resources, impacting data confidentiality and integrity.","exploit_maturity":"No public exploit","published":"2025-02-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-1584","description":"A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.9 is able to address this issue. The name of the patch is f46e47fd1f8455b9467d7ead3cdb0509115b2ef1. It is recommended to upgrade the affected component.","exploit_maturity":"No public exploit","published":"2025-02-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-23020","description":"An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability (in the hash table used to manage connections) allows remote attackers to cause a considerable CPU load on the server (a Hash DoS attack) by initiating connections with colliding Source Connection IDs (SCIDs).","exploit_maturity":"No public exploit","published":"2025-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-6697","description":"The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state. (CWE-280)\n\n\n\n \n\n\n\nHitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, do not handle invalid and missing permissions correctly, resulting in a denial of service.\n\n\n\n \n\n\n\nAn adversary leverages a legitimate capability of an application in such a way as to achieve a negative technical impact.","exploit_maturity":"No public exploit","published":"2025-02-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-6696","description":"The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets. (CWE-1220) \n\n\n\n\n\n\nHitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, do not correctly perform an authorization check in the user console trash content\n\n\n\n\n\n\n An attacker exploits a weakness in the configuration of access controls and is able to bypass the intended protection that these measures guard against and thereby obtain unauthorized access to the system or network.","exploit_maturity":"No public exploit","published":"2025-02-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-37363","description":"The product does not perform an authorization check when an actor attempts to access a resource or perform an action. (CWE-862)\n\n\n\n\n\n\n Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.8, including 8.3.x, do not correctly perform an authorization check in the data source management service.\n\n\n\n\n\n\n\n\nWhen access control checks are incorrectly applied, users can access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures and denial of service.","exploit_maturity":"No public exploit","published":"2025-02-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-37362","description":"The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. (CWE-522) \n\n\n\n \n\n\n\nHitachi Vantara Pentaho Data Integration \u0026 Analytics versions before 10.2.0.0 and 9.3.0.8, including 8.3.x, discloses database passwords when saving connections to RedShift.\n\n\n\n \n\n\n\nProducts must not disclose sensitive information without cause. Disclosure of sensitive information can lead to further exploitation.","exploit_maturity":"No public exploit","published":"2025-02-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-37360","description":"Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') \n\n\n\n \n\n\n\nThe software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users. (CWE-79)\n\n\n\n \n\n\n\nHitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.0 and 9.3.0.9, including 8.3.x, allow a malicious URL to inject content into the Analyzer plugin interface.\n\n\n\n \n\n\n\n\nOnce the malicious script is injected, the attacker can perform a variety of malicious activities. The attacker could transfer private information, such as cookies that may include session information, from the victim's machine to the attacker. The attacker could send malicious requests to a web site on behalf of the victim, which could be especially dangerous to the site if the victim has administrator privileges to manage that site.","exploit_maturity":"No public exploit","published":"2025-02-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-1391","description":"A flaw was found in the Keycloak organization feature, which allows the incorrect assignment of an organization to a user if their username or email matches the organization’s domain pattern. This issue occurs at the mapper level, leading to misrepresentation in tokens. If an application relies on these claims for authorization, it may incorrectly assume a user belongs to an organization they are not a member of, potentially granting unauthorized access or privileges.","exploit_maturity":"No public exploit","published":"2025-02-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-32037","description":"GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software used by the server to be easily identified. GeoNetwork 4.4.5 and 4.2.10 fix this issue. No known workarounds are available.","exploit_maturity":"No public exploit","published":"2025-02-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-25247","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Felix Webconsole.\n\nThis issue affects Apache Felix Webconsole 4.x up to 4.9.8 and 5.x up to 5.0.8.\n\nUsers are recommended to upgrade to version 4.9.10 or 5.0.10 or higher, which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-02-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-25193","description":"Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crash. A similar issue was previously reported as CVE-2024-47535. This issue was fixed, but the fix was incomplete in that null-bytes were not counted against the input limit. Commit d1fbda62d3a47835d3fb35db8bd42ecc205a5386 contains an updated fix.","exploit_maturity":"Proof of concept only","published":"2025-02-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-11831","description":"A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.","exploit_maturity":"No public exploit","published":"2025-02-10","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-24860","description":"Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they should not be able to when using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer.\n\nUsers with restricted data center access can update their own permissions via data control language (DCL) statements on affected versions.\n\n\n\n\nThis issue affects Apache Cassandra: from 4.0.0 through 4.0.15 and from 4.1.0 through 4.1.7 for CassandraNetworkAuthorizer, and from 5.0.0 through 5.0.2 for both CassandraNetworkAuthorizer and CassandraCIDRAuthorizer.\n\n\n\n\nOperators using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer on affected versions should review data access rules for potential breaches. Users are recommended to upgrade to versions 4.0.16, 4.1.8, 5.0.3, which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-02-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-27137","description":"In Apache Cassandra it is possible for a local attacker without access\n to the Apache Cassandra process or configuration files to manipulate \nthe RMI registry to perform a man-in-the-middle attack and capture user \nnames and passwords used to access the JMX interface. The attacker can \nthen use these credentials to access the JMX interface and perform \nunauthorized operations.\n\n\nThis is same vulnerability that CVE-2020-13946 was issued for, but the Java option was changed in JDK10.\n\n\nThis issue affects Apache Cassandra from 4.0.2 through 5.0.2 running Java 11.\n\n\nOperators are recommended to upgrade to a release equal to or later than 4.0.15, 4.1.8, or 5.0.3 which fixes the issue.","exploit_maturity":"No public exploit","published":"2025-02-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-24961","description":"org.gaul S3Proxy implements the S3 API and proxies requests. Users of the filesystem and filesystem-nio2 storage backends could unintentionally expose local files to users. This issue has been addressed in version 2.6.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.","exploit_maturity":"No public exploit","published":"2025-02-03","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-23367","description":"A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor role is supposed to have only read access permissions and should not be able to suspend the server. \nThe vulnerability is caused by the Suspend and Resume handlers not performing authorization checks to validate whether the current user has the required permissions to proceed with the action.","exploit_maturity":"No public exploit","published":"2025-01-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-0142","description":"Cleartext storage of sensitive information in the Zoom Jenkins Marketplace plugin before version 1.4 may allow an authenticated user to conduct a disclosure of information via network access.","exploit_maturity":"No public exploit","published":"2025-01-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-24790","description":"Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. On Linux systems, when temporary credential caching is enabled, the Snowflake JDBC Driver will cache temporary credentials locally in a world-readable file. This vulnerability affects versions 3.6.8 through 3.21.0. Snowflake fixed the issue in version 3.22.0.","exploit_maturity":"No public exploit","published":"2025-01-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-57439","description":"An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Service (DoS) by duplicating the login name of the account.","exploit_maturity":"Proof of concept only","published":"2025-01-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-57438","description":"Insecure permissions in RuoYi v4.8.0 allows authenticated attackers to escalate privileges by assigning themselves higher level roles.","exploit_maturity":"Proof of concept only","published":"2025-01-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-0736","description":"A flaw was found in Infinispan, when using JGroups with JDBC_PING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by malicious actors.","exploit_maturity":"No public exploit","published":"2025-01-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-29869","description":"Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly. Any unauthorized user having access to the directory can read the sensitive information written into this file. Users are recommended to upgrade to version 4.0.1, which fixes this issue.","exploit_maturity":"No public exploit","published":"2025-01-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23953","description":"Use of Arrays.equals() in LlapSignerImpl in Apache Hive to compare message signatures allows attacker to forge a valid signature for an arbitrary message byte by byte. The attacker should be an authorized user of the product to perform this attack. Users are recommended to upgrade to version 4.0.0, which fixes this issue.\n\nThe problem occurs when an application doesn’t use a constant-time algorithm for validating a signature. The method Arrays.equals() returns false right away when it sees that one of the input’s bytes are different. It means that the comparison time depends on the contents of the arrays. This little thing may allow an attacker to forge a valid signature for an arbitrary message byte by byte. So it might allow malicious users to submit splits/work with selected signatures to LLAP without running as a privileged user, potentially leading to DDoS attack.\n\nMore details in the reference section.","exploit_maturity":"No public exploit","published":"2025-01-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-24814","description":"Core creation allows users to replace \"trusted\" configset files with arbitrary configuration\n\nSolr instances that (1) use the \"FileSystemConfigSetService\" component (the default in \"standalone\" or \"user-managed\" mode), and (2) are running without authentication and authorization are vulnerable to a sort of privilege escalation wherein individual \"trusted\" configset files can be ignored in favor of potentially-untrusted replacements available elsewhere on the filesystem.  These replacement config files are treated as \"trusted\" and can use \"\u003clib\u003e\" tags to add to Solr's classpath, which an attacker might use to load malicious code as a searchComponent or other plugin.\n\nThis issue affects all Apache Solr versions up through Solr 9.7.  Users can protect against the vulnerability by enabling authentication and authorization on their Solr clusters or switching to SolrCloud (and away from \"FileSystemConfigSetService\").  Users are also recommended to upgrade to Solr 9.8.0, which mitigates this issue by disabling use of \"\u003clib\u003e\" tags by default.","exploit_maturity":"No public exploit","published":"2025-01-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-52012","description":"Relative Path Traversal vulnerability in Apache Solr.\n\nSolr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the \"configset upload\" API.  Commonly known as a \"zipslip\", maliciously constructed ZIP files can use relative filepaths to write data to unanticipated parts of the filesystem.  \nThis issue affects Apache Solr: from 6.6 through 9.7.0.\n\nUsers are recommended to upgrade to version 9.8.0, which fixes the issue.  Users unable to upgrade may also safely prevent the issue by using Solr's \"Rule-Based Authentication Plugin\" to restrict access to the configset upload API, so that it can only be accessed by a trusted set of administrators/users.","exploit_maturity":"No public exploit","published":"2025-01-27","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2025-24363","description":"The HL7 FHIR IG publisher is a tool to take a set of inputs and create a standard FHIR IG. Prior to version 1.8.9, in CI contexts, the IG Publisher CLI uses git commands to determine the URL of the originating repo. If the repo was cloned, or otherwise set to use a repo that uses a username and credential based URL, the entire URL will be included in the built Implementation Guide, exposing username and credential. This does not impact users that clone public repos without credentials, such as those using the auto-ig-build continuous integration infrastructure. This problem has been patched in release 1.8.9. Some workarounds are available. Users should ensure the IG repo they are publishing does not have username or credentials included in the `origin` URL. Running the command `git remote origin url` should return a URL that contains no username, password, or token; or users should run the IG Publisher CLI with the `-repo` parameter and specify a URL that contains no username, password, or token.","exploit_maturity":"No public exploit","published":"2025-01-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-53299","description":"The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources.\nUsers are recommended to upgrade to versions 9.19.0 or 10.3.0, which fixes this issue.","exploit_maturity":"No public exploit","published":"2025-01-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-24403","description":"A missing permission check in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2025-01-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-24402","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers to connect to a Service Fabric URL using attacker-specified credentials IDs obtained through another method.","exploit_maturity":"No public exploit","published":"2025-01-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-24401","description":"Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Overall/Manage) to access functionality they're no longer entitled to.","exploit_maturity":"No public exploit","published":"2025-01-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-24400","description":"Jenkins Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 (both inclusive) uses the credential ID as the cache key during signing operations, allowing attackers able to create a credential with the same ID as a legitimate one in a different credentials store to sign an event published to RabbitMQ with the legitimate credentials.","exploit_maturity":"No public exploit","published":"2025-01-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-24397","description":"An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credential IDs of GitLab API token and Secret text credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2025-01-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-0604","description":"A flaw was found in Keycloak. When an Active Directory user resets their password, the system updates it without performing an LDAP bind to validate the new credentials against AD. This vulnerability allows users whose AD accounts are expired or disabled to regain access in Keycloak, bypassing AD restrictions. The issue enables authentication bypass and could allow unauthorized access under certain conditions.","exploit_maturity":"No public exploit","published":"2025-01-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-56923","description":"Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 \u003c= 6.4.1 allows a remote attacker to execute arbitrary JavaScript code. This is achieved by injecting a malicious payload into the Name field of a subscription. The attack can lead to session hijacking, data theft, or unauthorized actions when an admin user views the affected subscription.","exploit_maturity":"Proof of concept only","published":"2025-01-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-21570","description":"Vulnerability in the Oracle Life Sciences Argus Safety product of Oracle Health Sciences Applications (component: Login). The supported version that is affected is 8.2.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Life Sciences Argus Safety. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Life Sciences Argus Safety, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Life Sciences Argus Safety accessible data as well as unauthorized read access to a subset of Oracle Life Sciences Argus Safety accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21569","description":"Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Web Services). The supported version that is affected is 11.2.19.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Management. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21568","description":"Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and Security). The supported version that is affected is 11.2.19.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 4.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21563","description":"Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Run Control Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise CC Common Application Objects accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21562","description":"Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Run Control Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise CC Common Application Objects accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21561","description":"Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Purchasing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise SCM Purchasing accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise SCM Purchasing accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21560","description":"Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: SDK-Software Development Kit). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM Framework accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21558","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 20.12.1.0-20.12.21.5, 21.12.1.0-21.12.20.0 and 22.12.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21557","description":"Vulnerability in Oracle Application Express (component: General). Supported versions that are affected are 23.2 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Express. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Express accessible data as well as unauthorized read access to a subset of Oracle Application Express accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21554","description":"Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security). Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Order and Service Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Order and Service Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21552","description":"Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are Prior to 9.2.9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Orchestrator. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Orchestrator accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21550","description":"Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications (component: Web UI). Supported versions that are affected are 8.0.8.1, 8.1.2.7 and 8.1.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Behavior Detection Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Behavior Detection Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Behavior Detection Platform accessible data as well as unauthorized read access to a subset of Oracle Financial Services Behavior Detection Platform accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21544","description":"Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security). Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Order and Service Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Order and Service Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Order and Service Management accessible data as well as unauthorized read access to a subset of Oracle Communications Order and Service Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21542","description":"Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security). Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Order and Service Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Order and Service Management accessible data as well as unauthorized read access to a subset of Oracle Communications Order and Service Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Order and Service Management. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21541","description":"Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens and Grants UI). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Workflow accessible data as well as unauthorized read access to a subset of Oracle Workflow accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21539","description":"Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft (component: eSettlements). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN eSettlements. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN eSettlements accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise FIN eSettlements accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21538","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21537","description":"Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Cash Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN Cash Management accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise FIN Cash Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21530","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.60 and 8.61. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21528","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 20.12.1.0-20.12.21.5, 21.12.1.0-21.12.20.0, 22.12.1.0-22.12.16.0 and 23.12.1.0-23.12.10.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21527","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design Tools SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21526","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 20.12.1.0-20.12.21.5, 21.12.1.0-21.12.20.0, 22.12.1.0-22.12.16.0 and 23.12.1.0-23.12.10.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21517","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21514","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21513","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21512","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21509","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21508","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21507","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21502","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM Enterprise Edition: 20.3.16 and 21.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21498","description":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle HTTP Server accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-21489","description":"Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data as well as unauthorized read access to a subset of Oracle Advanced Outbound Telephony accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-45478","description":"Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0.\nUsers are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-21245","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2025-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2025-23366","description":"A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintainer”.","exploit_maturity":"No public exploit","published":"2025-01-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-45627","description":"In Apache Linkis \u003c1.7.0, due to the lack of effective filtering\nof parameters, an attacker configuring malicious Mysql JDBC parameters in the DataSource Manager Module will \n\nallow the attacker to read arbitrary files from the Linkis server. Therefore, the parameters in the Mysql JDBC URL should be blacklisted. This attack requires the attacker to obtain an authorized account from Linkis before it can be carried out. Versions of Apache Linkis \u003c 1.7.0 will be affected. \nWe recommend users upgrade the version of Linkis to version 1.7.0.","exploit_maturity":"No public exploit","published":"2025-01-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-11736","description":"A vulnerability was found in Keycloak. Admin users may have to access sensitive server environment variables and system properties through user-configurable URLs. When configuring backchannel logout URLs or admin URLs, admin users can include placeholders like ${env.VARNAME} or ${PROPNAME}. The server replaces these placeholders with the actual values of environment variables or system properties during URL processing.","exploit_maturity":"No public exploit","published":"2025-01-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-11734","description":"A denial of service vulnerability was found in Keycloak that could allow an administrative user with the right to change realm settings to disrupt the service. This action is done by modifying any of the security headers and inserting newlines, which causes the Keycloak server to write to a request that has already been terminated, leading to the failure of said request.","exploit_maturity":"No public exploit","published":"2025-01-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2025-23026","description":"jte (Java Template Engine) is a secure and lightweight template engine for Java and Kotlin. In affected versions Jte HTML templates with `script` tags or script attributes that include a Javascript template string (backticks) are subject to XSS. The `javaScriptBlock` and `javaScriptAttribute` methods in the `Escape` class do not escape backticks, which are used for Javascript template strings. Dollar signs in template strings should also be escaped as well to prevent undesired interpolation. HTML templates rendered by Jte's `OwaspHtmlTemplateOutput` in versions less than or equal to `3.1.15` with `script` tags or script attributes that contain Javascript template strings (backticks) are vulnerable. Users are advised to upgrade to version 3.1.16 or later to resolve this issue. There are no known workarounds for this vulnerability.","exploit_maturity":"Proof of concept only","published":"2025-01-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-8447","description":"A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of service.","exploit_maturity":"No public exploit","published":"2025-01-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23945","description":"Signing cookies is an application security feature that adds a digital signature to cookie data to verify its authenticity and integrity. The signature helps prevent malicious actors from modifying the cookie value, which can lead to security vulnerabilities and exploitation. Apache Hive’s service component accidentally exposes the signed cookie to the end user when there is a mismatch in signature between the current and expected cookie. Exposing the correct cookie signature can lead to further exploitation.\n\nThe vulnerable CookieSigner logic was introduced in Apache Hive by HIVE-9710 (1.2.0) and in Apache Spark by SPARK-14987 (2.0.0). The affected components are the following:\n* org.apache.hive:hive-service\n* org.apache.spark:spark-hive-thriftserver_2.11\n* org.apache.spark:spark-hive-thriftserver_2.12","exploit_maturity":"No public exploit","published":"2024-12-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-12798","description":"ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core\n upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java applications allows\n attacker to execute arbitrary code by compromising an existing\n logback configuration file or by injecting an environment variable\n before program execution.\n\n\n\n\n\nMalicious logback configuration files can allow the attacker to execute \narbitrary code using the JaninoEventEvaluator extension.\n\n\n\nA successful attack requires the user to have write access to a \nconfiguration file. Alternatively, the attacker could inject a malicious \nenvironment variable pointing to a malicious configuration file. In both \ncases, the attack requires existing privilege.","exploit_maturity":"No public exploit","published":"2024-12-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-56128","description":"Incorrect Implementation of Authentication Algorithm in Apache Kafka's SCRAM implementation.\n\nIssue Summary:\nApache Kafka's implementation of the Salted Challenge Response Authentication Mechanism (SCRAM) did not fully adhere to the requirements of RFC 5802 [1].\nSpecifically, as per RFC 5802, the server must verify that the nonce sent by the client in the second message matches the nonce sent by the server in its first message.\nHowever, Kafka's SCRAM implementation did not perform this validation.\n\nImpact:\nThis vulnerability is exploitable only when an attacker has plaintext access to the SCRAM authentication exchange. However, the usage of SCRAM over plaintext is strongly\ndiscouraged as it is considered an insecure practice [2]. Apache Kafka recommends deploying SCRAM exclusively with TLS encryption to protect SCRAM exchanges from interception [3].\nDeployments using SCRAM with TLS are not affected by this issue.\n\nHow to Detect If You Are Impacted:\nIf your deployment uses SCRAM authentication over plaintext communication channels (without TLS encryption), you are likely impacted.\nTo check if TLS is enabled, review your server.properties configuration file for listeners property. If you have SASL_PLAINTEXT in the listeners, then you are likely impacted.\n\nFix Details:\nThe issue has been addressed by introducing nonce verification in the final message of the SCRAM authentication exchange to ensure compliance with RFC 5802.\n\nAffected Versions:\nApache Kafka versions 0.10.2.0 through 3.9.0, excluding the fixed versions below.\n\nFixed Versions:\n3.9.0\n3.8.1\n3.7.2\n\nUsers are advised to upgrade to 3.7.2 or later to mitigate this issue.\n\nRecommendations for Mitigation:\nUsers unable to upgrade to the fixed versions can mitigate the issue by:\n- Using TLS with SCRAM Authentication:\nAlways deploy SCRAM over TLS to encrypt authentication exchanges and protect against interception.\n- Considering Alternative Authentication Mechanisms:\nEvaluate alternative authentication mechanisms, such as PLAIN, Kerberos or OAuth with TLS, which provide additional layers of security.","exploit_maturity":"No public exploit","published":"2024-12-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-54677","description":"Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.9.97.\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions \nmay also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-12539","description":"An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.","exploit_maturity":"No public exploit","published":"2024-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-11993","description":"Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.38, and Liferay DXP 7.4 GA through update 38 allows remote attackers to execute arbitrary web script or HTML via Dispatch name field","exploit_maturity":"No public exploit","published":"2024-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-10973","description":"A vulnerability was found in Keycloak. The environment option `KC_CACHE_EMBEDDED_MTLS_ENABLED` does not work and the JGroups replication configuration is always used in plain text which can allow an attacker that has access to adjacent networks related to JGroups to read sensitive information.","exploit_maturity":"No public exploit","published":"2024-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37940","description":"Cross-site scripting (XSS) vulnerability in the edit Service Access Policy page in Liferay Portal 7.0.0 through 7.4.3.87, and Liferay DXP 7.4 GA through update 87, 7.3 GA through update 29, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a service access policy's `Service Class` text field.","exploit_maturity":"No public exploit","published":"2024-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-35230","description":"GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. In affected versions the welcome and about page includes version and revision information about the software in use (including library and components used). This information is sensitive from a security point of view because it allows software used by the server to be easily identified. This issue has been patched in version 2.26.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.","exploit_maturity":"Proof of concept only","published":"2024-12-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-55876","description":"XWiki Platform is a generic wiki platform. Starting in version 1.2-milestone-2 and prior to versions 15.10.9 and 16.3.0, any user with an account on the main wiki could run scheduling operations on subwikis. To reproduce, as a user on the main wiki without any special right, view the document `Scheduler.WebHome` in a subwiki. Then, click on any operation (*e.g.,* Trigger) on any job. If the operation is successful, then the instance is vulnerable. This has been patched in XWiki 15.10.9 and 16.3.0. As a workaround, those who have subwikis where the Job Scheduler is enabled can edit the objects on `Scheduler.WebPreferences` to match the patch.","exploit_maturity":"Proof of concept only","published":"2024-12-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-12369","description":"A vulnerability was found in OIDC-Client. When using the RH SSO OIDC adapter with EAP 7.x or when using the elytron-oidc-client subsystem with EAP 8.x, authorization code injection attacks can occur, allowing an attacker to inject a stolen authorization code into the attacker's own session with the client with a victim's identity. This is usually done with a Man-in-the-Middle (MitM) or phishing attack.","exploit_maturity":"No public exploit","published":"2024-12-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-38827","description":"The usage of String.toLowerCase() and String.toUpperCase() has some Locale dependent exceptions that could potentially result in authorization rules not working properly.","exploit_maturity":"No public exploit","published":"2024-12-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-54004","description":"Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects list Parameter, allowing attackers with Item/Configure permission to enumerate file names on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2024-11-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-53267","description":"sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient verification for a situation where a validly-signed but \"mismatched\" bundle is presented as proof of inclusion into a transparency log. This bug impacts clients using any variation of KeylessVerifier.verify(). The verifier may accept a bundle with an unrelated log entry, cryptographically verifying everything but fails to ensure the log entry applies to the artifact in question, thereby \"verifying\" a bundle without any proof the signing event was logged. This allows the creation of a bundle without fulcio certificate and private key combined with an unrelated but time-correct log entry to fake logging of a signing event. A malicious actor using a compromised identity may want to do this to prevent discovery via rekor's log monitors. The signer's identity will still be available to the verifier. The signature on the bundle must still be on the correct artifact for the verifier to pass. sigstore-gradle-plugin and sigstore-maven-plugin are not affected by this as they only provide signing functionality. This issue has been patched in v1.1.0 release with PR #856. All users are advised to upgrade. There are no known workarounds for this vulnerability.","exploit_maturity":"Proof of concept only","published":"2024-11-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-9666","description":"A vulnerability was found in the Keycloak Server. The Keycloak Server is vulnerable to a denial of service (DoS) attack due to improper handling of proxy headers. When Keycloak is configured to accept incoming proxy headers, it may accept non-IP values, such as obfuscated identifiers, without proper validation. This issue can lead to costly DNS resolution operations, which an attacker could exploit to tie up IO threads and potentially cause a denial of service.\nThe attacker must have access to send requests to a Keycloak instance that is configured to accept proxy headers, specifically when reverse proxies do not overwrite incoming headers, and Keycloak is configured to trust these headers.","exploit_maturity":"No public exploit","published":"2024-11-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-10451","description":"A flaw was found in Keycloak. This issue occurs because sensitive runtime values, such as passwords, may be captured during the Keycloak build process and embedded as default values in bytecode, leading to unintended information disclosure. In Keycloak 26, sensitive data specified directly in environment variables during the build process is also stored as a default values, making it accessible during runtime. Indirect usage of environment variables for SPI options and Quarkus properties is also vulnerable due to unconditional expansion by PropertyMapper logic, capturing sensitive data as default values in all Keycloak versions up to 26.0.2.","exploit_maturity":"No public exploit","published":"2024-11-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-10270","description":"A vulnerability was found in the Keycloak-services package. If untrusted data is passed to the SearchQueryUtils method, it could lead to a denial of service (DoS) scenario by exhausting system resources due to a Regex complexity.","exploit_maturity":"No public exploit","published":"2024-11-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-52067","description":"Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causing the application to write Parameter names and values to the application log. Parameter Context values may contain sensitive information depending on application flow configuration. Deployments of Apache NiFi with the default Logback configuration do not log Parameter Context values. Upgrading to Apache NiFi 2.0.0 or 1.28.1 is the recommendation mitigation, eliminating Parameter value logging from the flow synchronization process regardless of the Logback configuration.","exploit_maturity":"No public exploit","published":"2024-11-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-31141","description":"Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients.\n\nApache Kafka Clients accept configuration data for customizing behavior, and includes ConfigProvider plugins in order to manipulate these configurations. Apache Kafka also provides FileConfigProvider, DirectoryConfigProvider, and EnvVarConfigProvider implementations which include the ability to read from disk or environment variables.\nIn applications where Apache Kafka Clients configurations can be specified by an untrusted party, attackers may use these ConfigProviders to read arbitrary contents of the disk and environment variables.\n\nIn particular, this flaw may be used in Apache Kafka Connect to escalate from REST API access to filesystem/environment access, which may be undesirable in certain environments, including SaaS products.\nThis issue affects Apache Kafka Clients: from 2.3.0 through 3.5.2, 3.6.2, 3.7.0.\n\n\nUsers with affected applications are recommended to upgrade kafka-clients to version \u003e=3.8.0, and set the JVM system property \"org.apache.kafka.automatic.config.providers=none\".\nUsers of Kafka Connect with one of the listed ConfigProvider implementations specified in their worker config are also recommended to add appropriate \"allowlist.pattern\" and \"allowed.paths\" to restrict their operation to appropriate bounds.\n\n\nFor users of Kafka Clients or Kafka Connect in environments that trust users with disk and environment variable access, it is not recommended to set the system property.\nFor users of the Kafka Broker, Kafka MirrorMaker 2.0, Kafka Streams, and Kafka command-line tools, it is not recommended to set the system property.","exploit_maturity":"No public exploit","published":"2024-11-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-52318","description":"Incorrect object recycling and reuse vulnerability in Apache Tomcat.\n\nThis issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96.\n\nUsers are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-52317","description":"Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect recycling of the request and response used by HTTP/2 requests \ncould lead to request and/or response mix-up between users.\n\nThis issue affects Apache Tomcat: from 11.0.0-M23 through 11.0.0-M26, from 10.1.27 through 10.1.30, from 9.0.92 through 9.0.95.\n\nUsers are recommended to upgrade to version 11.0.0, 10.1.31 or 9.0.96, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-38828","description":"Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.","exploit_maturity":"No public exploit","published":"2024-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-1419","description":"A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data.","exploit_maturity":"No public exploit","published":"2024-11-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-42499","description":"Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions.","exploit_maturity":"No public exploit","published":"2024-11-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-39610","description":"Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product.","exploit_maturity":"No public exploit","published":"2024-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-52549","description":"Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files on the controller file system.","exploit_maturity":"No public exploit","published":"2024-11-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-47535","description":"Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026 clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crashes. This vulnerability is fixed in 4.1.115.","exploit_maturity":"Proof of concept only","published":"2024-11-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-45087","description":"IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","exploit_maturity":"No public exploit","published":"2024-11-11","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-1932","description":"A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.","exploit_maturity":"No public exploit","published":"2024-11-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-45086","description":"IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources.","exploit_maturity":"No public exploit","published":"2024-11-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-43382","description":"Snowflake JDBC driver versions \u003e= 3.2.6 and \u003c= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage without the additional layer of protection provided by client side encryption.","exploit_maturity":"No public exploit","published":"2024-10-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-45477","description":"Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client browser will execute within the session context of the authenticated user. Upgrading to Apache NiFi 1.28.0 or 2.0.0-M4 is the recommended mitigation.","exploit_maturity":"No public exploit","published":"2024-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-49771","description":"MPXJ is an open source library to read and write project plans from a variety of file formats and databases. The patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. The issue is addressed in MPXJ version 13.5.1.","exploit_maturity":"No public exploit","published":"2024-10-28","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-47882","description":"OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in \"Something went wrong!\" error page includes the exception message and exception traceback without escaping HTML tags, enabling injection into the page if an attacker can reliably produce an error with an attacker-influenced message. It appears that the only way to reach this code in OpenRefine itself is for an attacker to somehow convince a victim to import a malicious file, which may be difficult. However, out-of-tree extensions may add their own calls to `respondWithErrorPage`. Version 3.8.3 has a fix for this issue.","exploit_maturity":"Proof of concept only","published":"2024-10-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-45031","description":"When editing objects in the Syncope Console, incomplete HTML tags could be used to bypass HTML sanitization. This made it possible to inject stored XSS payloads which would trigger for other users during ordinary usage of the application.\nXSS payloads could also be injected in Syncope Enduser when editing “Personal Information” or “User Requests”: such payloads would trigger for administrators in Syncope Console, thus enabling session hijacking.\n\nUsers are recommended to upgrade to version 3.0.9, which fixes this issue.","exploit_maturity":"No public exploit","published":"2024-10-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-38820","description":"The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.","exploit_maturity":"No public exploit","published":"2024-10-18","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2024-49580","description":"In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure","exploit_maturity":"No public exploit","published":"2024-10-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-45072","description":"IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources.","exploit_maturity":"No public exploit","published":"2024-10-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-45071","description":"IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","exploit_maturity":"No public exploit","published":"2024-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21286","description":"Vulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management product of Oracle PeopleSoft (component: Enterprise Learning Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise ELM Enterprise Learning Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise ELM Enterprise Learning Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise ELM Enterprise Learning Management accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise ELM Enterprise Learning Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21281","description":"Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.7.0.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Liquidity Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Liquidity Management accessible data as well as unauthorized read access to a subset of Oracle Banking Liquidity Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Liquidity Management. CVSS 3.1 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:L).","exploit_maturity":"No public exploit","published":"2024-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21264","description":"Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Activity Guide Composer). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise CC Common Application Objects accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise CC Common Application Objects accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21261","description":"Vulnerability in Oracle Application Express (component: General). Supported versions that are affected are 23.2 and 24.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Express. While the vulnerability is in Oracle Application Express, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Express accessible data as well as unauthorized read access to a subset of Oracle Application Express accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21258","description":"Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Installed Base accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21249","description":"Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Expenses). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Expenses. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise FIN Expenses accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21235","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and 21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21233","description":"Vulnerability in the Oracle Database Core component of Oracle Database Server. Supported versions that are affected are 19.3-19.24, 21.3-21.15 and 23.4-23.5. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle Database Core. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database Core accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21206","description":"Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are ECC:11-13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Command Center Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Enterprise Command Center Framework accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21205","description":"Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: OSB Core Functionality). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Bus. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Service Bus accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21202","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21192","description":"Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Fusion Middleware (component: WebLogic Mgmt). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Enterprise Manager for Fusion Middleware executes to compromise Oracle Enterprise Manager for Fusion Middleware. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Manager for Fusion Middleware accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-8184","description":"There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory.","exploit_maturity":"No public exploit","published":"2024-10-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-6762","description":"Jetty PushSessionCacheFilter can be exploited by unauthenticated users \nto launch remote DoS attacks by exhausting the server’s memory.","exploit_maturity":"No public exploit","published":"2024-10-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-9622","description":"A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BAD_MESSAGE state. As a result, any subsequent legitimate requests on the same connection are ignored, leading to client timeouts, which may impact systems using load balancers and expose them to risk.","exploit_maturity":"No public exploit","published":"2024-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-9621","description":"A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configuration to be vulnerable, such as SOAP logging enabled, application set client, and endpoint logging properties, and the attacker must have access to the application log.","exploit_maturity":"No public exploit","published":"2024-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-47855","description":"util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.","exploit_maturity":"No public exploit","published":"2024-10-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-47554","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.\n\nThe org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.\n\n\nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.\n\nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-10-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-47804","description":"If an attempt is made to create an item of a type prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API and either of these checks fail, Jenkins 2.478 and earlier, LTS 2.462.2 and earlier creates the item in memory, only deleting it from disk, allowing attackers with Item/Configure permission to save the item to persist it, effectively bypassing the item creation restriction.","exploit_maturity":"No public exploit","published":"2024-10-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-47803","description":"Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.","exploit_maturity":"No public exploit","published":"2024-10-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-9329","description":"In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested endpoint is '/management/domain'. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.","exploit_maturity":"No public exploit","published":"2024-09-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-45073","description":"IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","exploit_maturity":"No public exploit","published":"2024-09-30","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-23454","description":"Apache Hadoop’s RunJar.run() does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content.\nThis is because, on unix-like systems, the system temporary directory is\nshared between all local users. As such, files written in this directory,\nwithout setting the correct posix permissions explicitly, may be viewable\nby all other local users.","exploit_maturity":"No public exploit","published":"2024-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-8883","description":"A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.","exploit_maturity":"Working exploit published","published":"2024-09-19","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2024-46979","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to get access to notification filters of any user by using a URL such as `\u003chostname\u003exwiki/bin/get/XWiki/Notifications/Code/NotificationFilterPreferenceLivetableResults?outputSyntax=plain\u0026type=custom\u0026user=\u003cusername\u003e`. This vulnerability impacts all versions of XWiki since 13.2-rc-1. The filters do not provide much information (they mainly contain references which are public data in XWiki), though some info could be used in combination with other vulnerabilities. This vulnerability has been patched in XWiki 14.10.21, 15.5.5, 15.10.1, 16.0RC1. The patch consists in checking the rights of the user when sending the data. Users are advised to upgrade. It's possible to workaround the vulnerability by applying manually the patch: it's possible for an administrator to edit directly the document `XWiki.Notifications.Code.NotificationFilterPreferenceLivetableResults` to apply the same changes as in the patch. See commit c8c6545f9bde6f5aade994aa5b5903a67b5c2582.","exploit_maturity":"No public exploit","published":"2024-09-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-46978","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible for any user knowing the ID of a notification filter preference of another user, to enable/disable it or even delete it. The impact is that the target user might start loosing notifications on some pages because of this. This vulnerability is present in XWiki since 13.2-rc-1. This vulnerability has been patched in XWiki 14.10.21, 15.5.5, 15.10.1, 16.0-rc-1. The patch consists in checking properly the rights of the user before performing any action on the filters. Users are advised to upgrade. It's possible to fix manually the vulnerability by editing the document `XWiki.Notifications.Code.NotificationPreferenceService` to apply the changes performed in commit e8acc9d8e6af7dfbfe70716ded431642ae4a6dd4.","exploit_maturity":"No public exploit","published":"2024-09-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-45537","description":"Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid also allows administrators to configure a list of allowed properties that users are able to provide for their JDBC connections. By default, this allowed properties list restricts users to TLS-related properties only. However, when configuration a MySQL JDBC connection, users can use a particularly-crafted JDBC connection string to provide properties that are not on this allow list.\n\nUsers without the permission to configure JDBC connections are not able to exploit this vulnerability.\nCVE-2021-26919 describes a similar vulnerability which was partially addressed in Apache Druid 0.20.2.\n\nThis issue is fixed in Apache Druid 30.0.1.","exploit_maturity":"No public exploit","published":"2024-09-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-45384","description":"Padding Oracle vulnerability in Apache Druid extension, druid-pac4j.\nThis could allow an attacker to manipulate a pac4j session cookie.\n\nThis issue affects Apache Druid versions 0.18.0 through 30.0.0.\nSince the druid-pac4j extension is optional and disabled by default, Druid installations not using the druid-pac4j extension are not affected by this vulnerability.\n\nWhile we are not aware of a way to meaningfully exploit this flaw, we \nnevertheless recommend upgrading to version 30.0.1 or higher which fixes the issue\nand ensuring you have a strong \ndruid.auth.pac4j.cookiePassphrase as a precaution.","exploit_maturity":"No public exploit","published":"2024-09-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-8646","description":"In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed.\nThis vulnerability is caused by the vulnerability (CVE-2023-41080) in the Apache code included in GlassFish.\nThis vulnerability only affects applications that are explicitly deployed to the root context ('/').","exploit_maturity":"No public exploit","published":"2024-09-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-8642","description":"In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApiController does not check for token validity (expiry, not-before, issuance date), which can allow an attacker to bypass the check for token expiration. The issue requires to have a dataplane configured to support http proxy consumer pull AND include the module \"transfer-data-plane\". The affected code was marked deprecated from the version 0.6.0 in favour of Dataplane Signaling. In 0.9.0 the vulnerable code has been removed.","exploit_maturity":"Proof of concept only","published":"2024-09-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-45591","description":"XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The exposed information includes for each modification of the page the time of the modification, the version number, the author of the modification (both username and displayed name) and the version comment. This information is exposed regardless of the rights setup, and even when the wiki is configured to be fully private. On a private wiki, this can be tested by accessing /xwiki/rest/wikis/xwiki/spaces/Main/pages/WebHome/history, if this shows the history of the main page then the installation is vulnerable. This has been patched in XWiki 15.10.9 and XWiki 16.3.0RC1.","exploit_maturity":"Working exploit published","published":"2024-09-10","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2024-7318","description":"A vulnerability was found in Keycloak. Expired OTP codes are still usable when using FreeOTP when the OTP token period is set to 30 seconds (default). Instead of expiring and deemed unusable around 30 seconds in, the tokens are valid for an additional 30 seconds totaling 1 minute.\r\nA one time passcode that is valid longer than its expiration time increases the attack window for malicious actors to abuse the system and compromise accounts. Additionally, it increases the attack surface because at any given time, two OTPs are valid.","exploit_maturity":"No public exploit","published":"2024-09-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-7260","description":"An open redirect vulnerability was found in Keycloak. A specially crafted URL can be constructed where the referrer and referrer_uri parameters are made to trick a user to visit a malicious webpage. A trusted URL can trick users and automation into believing that the URL is safe, when, in fact, it redirects to a malicious server. This issue can result in a victim inadvertently trusting the destination of the redirect, potentially leading to a successful phishing attack or other types of attacks.\r\n\r\nOnce a crafted URL is made, it can be sent to a Keycloak admin via email for example. This will trigger this vulnerability when the user visits the page and clicks the link. A malicious actor can use this to target users they know are Keycloak admins for further attacks. It may also be possible to bypass other domain-related security checks, such as supplying this as a OAuth redirect uri. The malicious actor can further obfuscate the redirect_uri using URL encoding, to hide the text of the actual malicious website domain.","exploit_maturity":"No public exploit","published":"2024-09-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-8391","description":"In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload (Maven GAV: io.vertx:vertx-grpc-server and io.vertx:vertx-grpc-client). \n\n\n\n\nThis is fixed in the 4.5.10 version. \n\n\n\n\nNote this does not affect the Vert.x gRPC server based grpc-java and Netty libraries (Maven GAV: io.vertx:vertx-grpc)","exploit_maturity":"No public exploit","published":"2024-09-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-4629","description":"A vulnerability was found in Keycloak. This flaw allows attackers to bypass brute force protection by exploiting the timing of login attempts. By initiating multiple login requests simultaneously, attackers can exceed the configured limits for failed attempts before the system locks them out. This timing loophole enables attackers to make more guesses at passwords than intended, potentially compromising account security on affected systems.","exploit_maturity":"No public exploit","published":"2024-09-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-8285","description":"A flaw was found in Kroxylicious. When establishing the connection with the upstream Kafka server using a TLS secured connection, Kroxylicious fails to properly verify the server's hostname, resulting in an insecure connection. For a successful attack to be performed, the attacker needs to perform a Man-in-the-Middle attack or compromise any external systems, such as DNS or network routing configuration. This issue is considered a high complexity attack, with additional high privileges required, as the attack would need access to the Kroxylicious configuration or a peer system. The result of a successful attack impacts both data integrity and confidentiality.","exploit_maturity":"No public exploit","published":"2024-08-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-38807","description":"Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be vulnerable to signature forgery where content that appears to have been signed by one signer has, in fact, been signed by another.","exploit_maturity":"No public exploit","published":"2024-08-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-43397","description":"Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that allows users to craft specific requests to bypass permission checks. This exploit enables them to modify a namespace without the necessary permissions. The issue was addressed with an input parameter check which was released in version 2.3.0.","exploit_maturity":"No public exploit","published":"2024-08-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-38808","description":"In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.\n\nSpecifically, an application is vulnerable when the following is true:\n\n * The application evaluates user-supplied SpEL expressions.","exploit_maturity":"No public exploit","published":"2024-08-20","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-50315","description":"IBM WebSphere Application Server 8.5 and 9.0 could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 274714.","exploit_maturity":"No public exploit","published":"2024-08-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-41909","description":"Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795. An attacker that can intercept traffic between client and server could drop certain packets from the stream, potentially causing client and server to consequently end up with a connection for which \nsome security features have been downgraded or disabled, aka a Terrapin \nattack\n\nThe mitigations to prevent this type of attack were implemented in Apache MINA SSHD 2.12.0, both client and server side. Users are recommended to upgrade to at least this version. Note that both the client and the server implementation must have mitigations applied against this issue, otherwise the connection may still be affected.","exploit_maturity":"No public exploit","published":"2024-08-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-43045","description":"Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to access other users' \"My Views\".","exploit_maturity":"No public exploit","published":"2024-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-27182","description":"In Apache Linkis \u003c= 1.5.0,\n\nArbitrary file deletion in Basic management services on \n\nA user with an administrator account could delete any file accessible by the Linkis system user\n\n.\nUsers are recommended to upgrade to version 1.6.0, which fixes this issue.","exploit_maturity":"No public exploit","published":"2024-08-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-41948","description":"biscuit-java is the java implementation of Biscuit, an authentication and authorization token for microservices architectures. Third-party blocks can be generated without transferring the whole token to the third-party authority. Instead, a ThirdPartyBlock request can be sent, providing only the necessary info to generate a third-party block and to sign it, which includes the public key of the previous block (used in the signature) and the public keys part of the token symbol table (for public key interning in datalog expressions). A third-part block request forged by a malicious user can trick the third-party authority into generating datalog trusting the wrong keypair. This vulnerability is fixed in 4.0.0.","exploit_maturity":"No public exploit","published":"2024-08-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-37900","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When uploading an attachment with a malicious filename, malicious JavaScript code could be executed. This requires a social engineering attack to get the victim into uploading a file with a malicious name. The malicious code is solely executed during the upload and affects only the user uploading the attachment. While this allows performing actions in the name of that user, it seems unlikely that a user wouldn't notice the malicious filename while uploading the attachment. This has been patched in XWiki 14.10.21, 15.5.5, 15.10.6 and 16.0.0.","exploit_maturity":"Proof of concept only","published":"2024-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-37898","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When a user has view but not edit right on a page in XWiki, that user can delete the page and replace it by a page with new content without having delete right. The previous version of the page is moved into the recycle bin and can be restored from there by an admin. As the user is recorded as deleter, the user would in theory also be able to view the deleted content, but this is not directly possible as rights of the previous version are transferred to the new page and thus the user still doesn't have view right on the page. It therefore doesn't seem to be possible to exploit this to gain any rights. This has been patched in XWiki 14.10.21, 15.5.5 and 15.10.6 by cancelling save operations by users when a new document shall be saved despite the document's existing already.","exploit_maturity":"No public exploit","published":"2024-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-40094","description":"GraphQL Java (aka graphql-java) before 21.5 does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions.","exploit_maturity":"No public exploit","published":"2024-07-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-49921","description":"An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored in Elasticsearch to be printed in logs. Elastic has released 8.11.2 and 7.17.16 that resolves this issue by removing this excessive logging. This issue only affects users that use Watcher and have a Watch defined that uses the search input and additionally have set the search input’s logger to DEBUG or finer, for example using: org.elasticsearch.xpack.watcher.input.search, org.elasticsearch.xpack.watcher.input, org.elasticsearch.xpack.watcher, or wider, since the loggers are hierarchical.","exploit_maturity":"No public exploit","published":"2024-07-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-38503","description":"When editing a user, group or any object in the Syncope Console, HTML tags could be added to any text field and could lead to potential exploits.\nThe same vulnerability was found in the Syncope Enduser, when editing “Personal Information” or “User Requests”.\n\nUsers are recommended to upgrade to version 3.0.8, which fixes this issue.","exploit_maturity":"No public exploit","published":"2024-07-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-30471","description":"Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration.\nThis allows an attacker to potentially request the creation of multiple accounts with the same email address until the email address is registered, creating many identical users and corrupting StreamPipe's user management.\nThis issue affects Apache StreamPipes: through 0.93.0.\n\nUsers are recommended to upgrade to version 0.95.0, which fixes the issue.\n\n","exploit_maturity":"No public exploit","published":"2024-07-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-29120","description":"In Streampark (version \u003c 2.1.4), when a user logged in successfully, the Backend service would return \"Authorization\" as the front-end authentication credential. User can use this credential to request other users' information, including the administrator's username, password, salt value, etc. \n\nMitigation:\n\nall users should upgrade to 2.1.4","exploit_maturity":"No public exploit","published":"2024-07-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-21188","description":"Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Chatbot). Supported versions that are affected are 6.0.0.0.0 and 6.1.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Revenue Management and Billing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Revenue Management and Billing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Revenue Management and Billing accessible data as well as unauthorized read access to a subset of Oracle Financial Services Revenue Management and Billing accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21180","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21178","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21169","description":"Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Partners). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Marketing accessible data as well as unauthorized read access to a subset of Oracle Marketing accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21168","description":"Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are Prior to 9.2.8.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Orchestrator. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Orchestrator accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21158","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21154","description":"Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Human Resources). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21150","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.8.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21148","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data as well as unauthorized read access to a subset of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21145","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21143","description":"Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iStore accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21140","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21139","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers). Supported versions that are affected are 7.0.0.0.0, 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21133","description":"Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Servlet). Supported versions that are affected are 12.2.1.4.0 and 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Reports Developer accessible data as well as unauthorized read access to a subset of Oracle Reports Developer accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21132","description":"Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Approvals). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Purchasing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Purchasing accessible data as well as unauthorized read access to a subset of Oracle Purchasing accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21128","description":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: APIs). Supported versions that are affected are 12.2.6-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Object Library, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data as well as unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21122","description":"Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft (component: Text Catalog). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Shared Components. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HCM Shared Components, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Shared Components accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Shared Components accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-41916","description":"\nIn Apache Linkis =1.4.0, due to the lack of effective filtering\nof parameters, an attacker configuring malicious Mysql JDBC parameters in the DataSource Manager Module will trigger arbitrary file reading. Therefore, the parameters in the Mysql JDBC URL should be blacklisted. This attack requires the attacker to obtain an authorized account from Linkis before it can be carried out. Versions of Apache Linkis = 1.4.0 will be affected. \nWe recommend users upgrade the version of Linkis to version 1.5.0.\n\n","exploit_maturity":"No public exploit","published":"2024-07-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-39901","description":"OpenSearch Observability is collection of plugins and applications that visualize data-driven events. An issue in the OpenSearch observability plugins allows unintended access to private tenant resources like notebooks. The system did not properly check if the user was the resource author when accessing resources in a private tenant, leading to potential data being revealed. The patches are included in OpenSearch 2.14.","exploit_maturity":"No public exploit","published":"2024-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-39900","description":"OpenSearch Dashboards Reports allows ‘Report Owner’ export and share reports from OpenSearch Dashboards. An issue in the OpenSearch reporting plugin allows unintended access to private tenant resources like notebooks. The system did not properly check if the user was the resource author when accessing resources in a private tenant, leading to potential data being revealed. The patches are included in OpenSearch 2.14.","exploit_maturity":"No public exploit","published":"2024-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-39031","description":"In Silverpeas Core \u003c= 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar. Additionally, users can invite others from the same domain, including administrators, to these events. A standard user can inject an XSS payload into the \"Titre\" and \"Description\" fields when creating an event and then add the administrator or any user to the event. When the invited user (victim) views their own profile, the payload will be executed on their side, even if they do not click on the event.","exploit_maturity":"Proof of concept only","published":"2024-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-37389","description":"Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client browser will execute within the session context of the authenticated user. Upgrading to Apache NiFi 1.27.0 or 2.0.0-M4 is the recommended mitigation.","exploit_maturity":"No public exploit","published":"2024-07-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-3653","description":"A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.","exploit_maturity":"No public exploit","published":"2024-07-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-34696","description":"GeoServer is an open source server that allows users to share and edit geospatial data. Starting in version 2.10.0 and prior to versions 2.24.4 and 2.25.1, GeoServer's Server Status page and REST API lists all environment variables and Java properties to any GeoServer user with administrative rights as part of those modules' status message. These variables/properties can also contain sensitive information, such as database passwords or API keys/tokens. Additionally, many community-developed GeoServer container images `export` other credentials from their start-up scripts as environment variables to the GeoServer (`java`) process. The precise scope of the issue depends on which container image is used and how it is configured.\n\nThe `about status` API endpoint which powers the Server Status page is only available to administrators.Depending on the operating environment, administrators might have legitimate access to credentials in other ways, but this issue defeats more sophisticated controls (like break-glass access to secrets or role accounts).By default, GeoServer only allows same-origin authenticated API access. This limits the scope for a third-party attacker to use an administrator’s credentials to gain access to credentials. The researchers who found the vulnerability were unable to determine any other conditions under which the GeoServer REST API may be available more broadly.\n\nUsers should update container images to use GeoServer 2.24.4 or 2.25.1 to get the bug fix. As a workaround, leave environment variables and Java system properties hidden by default. Those who provide the option to re-enable it should communicate the impact and risks so that users can make an informed choice.","exploit_maturity":"No public exploit","published":"2024-07-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-35153","description":"IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 292640.","exploit_maturity":"No public exploit","published":"2024-06-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-39460","description":"Jenkins Bitbucket Branch Source Plugin 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of the Bitbucket URL in the build log in some cases.","exploit_maturity":"No public exploit","published":"2024-06-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-39459","description":"In rare cases Jenkins Plain Credentials Plugin 182.v468b_97b_9dcb_8 and earlier stores secret file credentials unencrypted (only Base64 encoded) on the Jenkins controller file system, where they can be viewed by users with access to the Jenkins controller file system (global credentials) or with Item/Extended Read permission (folder-scoped credentials).","exploit_maturity":"No public exploit","published":"2024-06-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-27136","description":"XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later. ","exploit_maturity":"Forecast only","published":"2024-06-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-38356","description":"TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s content extraction code. When using the `noneditable_regexp` option, specially crafted HTML attributes containing malicious code were able to be executed when content was extracted from the editor. This vulnerability has been patched in TinyMCE 7.2.0, TinyMCE 6.8.4 and TinyMCE 5.11.0 LTS by ensuring that, when using the `noneditable_regexp` option, any content within an attribute is properly verified to match the configured regular expression before being added. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n","exploit_maturity":"No public exploit","published":"2024-06-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-38460","description":"In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially exposed in cleartext as part of the URL parameters in the logs (such as SonarQube Access Logs, Proxy Logs, etc).","exploit_maturity":"No public exploit","published":"2024-06-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-37309","description":"CrateDB is a distributed SQL database. A high-risk vulnerability has been identified in versions prior to 5.7.2 where the TLS endpoint (port 4200) permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request renegotiation of security parameters during an ongoing TLS session. This flaw could lead to excessive consumption of CPU resources, resulting in potential server overload and service disruption. The vulnerability was confirmed using an openssl client where the command `R` initiates renegotiation, followed by the server confirming with `RENEGOTIATING`. This vulnerability allows an attacker to perform a denial of service attack by exhausting server CPU resources through repeated TLS renegotiations. This impacts the availability of services running on the affected server, posing a significant risk to operational stability and security. TLS 1.3 explicitly forbids renegotiation, since it closes a window of opportunity for an attack. Version 5.7.2 of CrateDB contains the fix for the issue.\n","exploit_maturity":"Proof of concept only","published":"2024-06-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-37280","description":"A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a dynamic field mapping of “passthrough” type. Under certain circumstances, ingesting documents in this index would cause a StackOverflow exception to be thrown and ultimately lead to a Denial of Service. Note that passthrough fields is an experimental feature.","exploit_maturity":"No public exploit","published":"2024-06-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-35255","description":"Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability","exploit_maturity":"No public exploit","published":"2024-06-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-36124","description":"iq80 Snappy is a compression/decompression library. When uncompressing certain data, Snappy tries to read outside the bounds of the given byte arrays. Because Snappy uses the JDK class `sun.misc.Unsafe` to speed up memory access, no additional bounds checks are performed and this has similar security consequences as out-of-bounds access in C or C++, namely it can lead to non-deterministic behavior or crash the JVM. iq80 Snappy is not actively maintained anymore. As quick fix users can upgrade to version 0.5.\n","exploit_maturity":"No public exploit","published":"2024-06-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-5520","description":"Two Cross-Site Scripting vulnerabilities have been discovered in Alkacon's OpenCMS affecting version 16, which could allow a user with sufficient privileges to create and modify web pages through the admin panel, can execute malicious JavaScript code, after inserting code in the “title” field.","exploit_maturity":"No public exploit","published":"2024-05-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-5273","description":"Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by editing the workspace path.","exploit_maturity":"No public exploit","published":"2024-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-22588","description":"Kwik commit 745fd4e2 does not discard unused encryption keys.","exploit_maturity":"Proof of concept only","published":"2024-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-46442","description":"An infinite loop in the retrieveActiveBody function of Soot before v4.4.1 under Java 8 allows attackers to cause a Denial of Service (DoS).","exploit_maturity":"Proof of concept only","published":"2024-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-5165","description":"In Eclipse Ditto versions 3.0.0 to 3.5.5, the user input of several input fields of the Eclipse Ditto Explorer User Interface https://eclipse.dev/ditto/user-interface.html was not properly neutralized and thus vulnerable to both Reflected and Stored XSS (Cross Site Scripting).\n\n\n\n\n\nSeveral inputs were not persisted at the backend of Eclipse Ditto, but only in local browser storage to save settings of \"environments\" of the UI and e.g. the last performed \"search queries\", resulting in a \"Reflected XSS\" vulnerability.\n\n\n\n\nHowever, several other inputs were persisted at the backend of Eclipse Ditto, leading to a \"Stored XSS\" vulnerability. Those mean that authenticated and authorized users at Eclipse Ditto can persist Things in Ditto which can - when being displayed by other users also being authorized to see those Things in the Eclipse Ditto UI - cause scripts to be executed in the browser of other users.","exploit_maturity":"No public exploit","published":"2024-05-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-29392","description":"Silverpeas Core 6.3 is vulnerable to Cross Site Scripting (XSS) via ClipboardSessionController.","exploit_maturity":"No public exploit","published":"2024-05-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-28087","description":"In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable.","exploit_maturity":"Proof of concept only","published":"2024-05-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-3462","description":"Ant Media Server Community Edition in a default configuration is vulnerable to an improper HTTP header based authorization, leading to a possible use of non-administrative API calls reserved only for authorized users. \nAll versions up to 2.9.0 (tested) and possibly newer ones are believed to be vulnerable as the vendor has not confirmed releasing a patch.","exploit_maturity":"No public exploit","published":"2024-05-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-30171","description":"An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.","exploit_maturity":"No public exploit","published":"2024-05-14","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2024-4536","description":"In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, in the EDC Connector component ( https://github.com/eclipse-edc/Connector ), an attacker might obtain OAuth2 client secrets from the vault.\n\nIn Eclipse Dataspace Components from version 0.2.1 to 0.6.2, we have identified a security vulnerability in the EDC Connector component ( https://github.com/eclipse-edc/Connector ) regarding the OAuth2-protected data sink feature. When using a custom, OAuth2-protected data sink, the OAuth2-specific data address properties are resolved by the provider data plane. Problematically, the consumer-provided clientSecretKey, which indicates the OAuth2 client secret to retrieve from a secrets vault, is resolved in the context of the provider's vault, not the consumer. This secret's value is then sent to the tokenUrl, also consumer-controlled, as part of an OAuth2 client credentials grant. The returned access token is then sent as a bearer token to the data sink URL.\n\nThis feature is now disabled entirely, because not all code paths necessary for a successful realization were fully implemented.\n\n","exploit_maturity":"No public exploit","published":"2024-05-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-34517","description":"The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access.","exploit_maturity":"No public exploit","published":"2024-05-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-33748","description":"Cross-site scripting (XSS) vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier.","exploit_maturity":"Proof of concept only","published":"2024-05-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-35701","description":"Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Hive.\n\nThe vulnerability affects the Hive JDBC driver component and it can potentially lead to arbitrary code execution on the machine/endpoint that the JDBC driver (client) is running. The malicious user must have sufficient permissions to specify/edit JDBC URL(s) in an endpoint relying on the Hive JDBC driver and the JDBC client process must run under a privileged user to fully exploit the vulnerability. \n\nThe attacker can setup a malicious HTTP server and specify a JDBC URL pointing towards this server. When a JDBC connection is attempted, the malicious HTTP server can provide a special response with customized payload that can trigger the execution of certain commands in the JDBC client.This issue affects Apache Hive: from 4.0.0-alpha-1 before 4.0.0.\n\nUsers are recommended to upgrade to version 4.0.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-05-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-4029","description":"A vulnerability was found in Wildfly’s management interface. Due to the lack of limitation of sockets for the management interface, it may be possible to cause a denial of service hitting the nofile limit as there is no possibility to configure or set a maximum number of connections.","exploit_maturity":"No public exploit","published":"2024-05-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-34148","description":"Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for CVE-2016-3721 whenever a build is triggered from a release tag, by setting the Java system property 'hudson.model.ParametersAction.keepUndefinedParameters'.","exploit_maturity":"No public exploit","published":"2024-05-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-34147","description":"Jenkins Telegram Bot Plugin 1.4.0 and earlier stores the Telegram Bot token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2024-05-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-34146","description":"Jenkins Git server Plugin 114.v068a_c7cc2574 and earlier does not perform a permission check for read access to a Git repository over SSH, allowing attackers with a previously configured SSH public key but lacking Overall/Read permission to access these repositories.","exploit_maturity":"No public exploit","published":"2024-05-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-1726","description":"A flaw was discovered in the RESTEasy Reactive implementation in Quarkus. Due to security checks for some JAX-RS endpoints being performed after serialization, more processing resources are consumed while the HTTP request is checked. In certain configurations, if an attacker has knowledge of any POST, PUT, or PATCH request paths, they can potentially identify vulnerable endpoints and trigger excessive resource usage as the endpoints process the requests. This can result in a denial of service.","exploit_maturity":"No public exploit","published":"2024-04-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-1102","description":"A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as the username and password for the database-connection.","exploit_maturity":"No public exploit","published":"2024-04-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-6717","description":"A flaw was found in the SAML client registration in Keycloak that could allow an administrator to register malicious JavaScript URIs as Assertion Consumer Service POST Binding URLs (ACS), posing a Cross-Site Scripting (XSS) risk. This issue may allow a malicious admin in one realm or a client with registration access to target users in different realms or applications, executing arbitrary JavaScript in their contexts upon form submission. This can enable unauthorized access and harmful actions, compromising the confidentiality, integrity, and availability of the complete KC instance.","exploit_maturity":"No public exploit","published":"2024-04-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-6544","description":"A flaw was found in the Keycloak package. This issue occurs due to a permissive regular expression hardcoded for filtering which allows hosts to register a dynamic client. A malicious user with enough information about the environment could jeopardize an environment with this specific Dynamic Client Registration and TrustedDomain configuration previously unauthorized.","exploit_maturity":"No public exploit","published":"2024-04-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-6484","description":"A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.","exploit_maturity":"No public exploit","published":"2024-04-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-5675","description":"A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the abstract Java class or customized by Quarkus extensions using the annotation processor, the authorization of these methods will not be enforced if it is enabled by either 'quarkus.security.jaxrs.deny-unannotated-endpoints' or 'quarkus.security.jaxrs.default-roles-allowed' properties.","exploit_maturity":"No public exploit","published":"2024-04-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-3597","description":"A flaw was found in Keycloak, where it does not correctly validate its client step-up authentication in org.keycloak.authentication. This flaw allows a remote user authenticated with a password to register a false second authentication factor along with an existing one and bypass authentication.","exploit_maturity":"No public exploit","published":"2024-04-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-27347","description":"Server-Side Request Forgery (SSRF) vulnerability in Apache HugeGraph-Hubble.This issue affects Apache HugeGraph-Hubble: from 1.0.0 before 1.3.0.\n\nUsers are recommended to upgrade to version 1.3.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-04-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-3825","description":"Versions of the BlazeMeter Jenkins plugin prior to 4.22 contain a flaw which results in credential enumeration\n","exploit_maturity":"No public exploit","published":"2024-04-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-22329","description":"IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.3 are vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker could exploit this vulnerability to conduct the SSRF attack. X-Force ID: 279951.","exploit_maturity":"No public exploit","published":"2024-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21100","description":"Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Platform). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. While the vulnerability is in Oracle Commerce Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Platform accessible data. CVSS 3.1 Base Score 4.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21099","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Data Visualization). The supported version that is affected is 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21097","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21091","description":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Data Import). The supported version that is affected is 6.2.4.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile Product Lifecycle Management for Process accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21089","description":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Concurrent Processing accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21086","description":"Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21084","description":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Service Gateway). Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. While the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle BI Publisher accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21081","description":"Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Attribute Admin Setup). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21080","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: REST Services). Supported versions that are affected are 12.2.9-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Applications Framework accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21072","description":"Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Data Provider UI). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Installed Base, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data as well as unauthorized read access to a subset of Oracle Installed Base accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21070","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21065","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21064","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers). Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21063","description":"Vulnerability in the PeopleSoft Enterprise HCM Benefits Administration product of Oracle PeopleSoft (component: Benefits Administration). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise HCM Benefits Administration executes to compromise PeopleSoft Enterprise HCM Benefits Administration. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise HCM Benefits Administration accessible data as well as unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Benefits Administration accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise HCM Benefits Administration. CVSS 3.1 Base Score 6.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21048","description":"Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: XML input). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Web Applications Desktop Integrator accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21046","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21045","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21044","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21043","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21042","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21041","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21040","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21039","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21038","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21037","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21036","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21035","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21034","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21033","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21032","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21031","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21030","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21029","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21028","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21027","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21025","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21024","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21023","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21022","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21021","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21020","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21019","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21018","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21017","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21016","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21001","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). The supported version that is affected is 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20992","description":"Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Content integration). The supported version that is affected is 12.2.1.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Portal accessible data as well as unauthorized read access to a subset of Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20991","description":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle HTTP Server accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20990","description":"Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: Templates). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Technology. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Applications Technology accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-31985","description":"XWiki Platform is a generic wiki platform. Starting in version 3.1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, it is possible to schedule/trigger/unschedule existing jobs by having an admin visit the Job Scheduler page through a predictable URL, for example by embedding such an URL in any content as an image. The vulnerability has been fixed in XWiki 14.10.19, 15.5.5, and 15.9. As a workaround, manually apply the patch by modifying the `Scheduler.WebHome` page.","exploit_maturity":"No public exploit","published":"2024-04-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-31464","description":"XWiki Platform is a generic wiki platform. Starting in version 5.0-rc-1 and prior to versions 14.10.19, 15.5.4, and 15.9-rc-1, it is possible to access the hash of a password by using the diff feature of the history whenever the object storing the password is deleted. Using that vulnerability it's possible for an attacker to have access to the hash password of a user if they have rights to edit the users' page. With the default right scheme in XWiki this vulnerability is normally prevented on user profiles, except by users with Admin rights. Note that this vulnerability also impacts any extensions that might use passwords stored in xobjects: for those usecases it depends on the right of those pages. There is currently no way to be 100% sure that this vulnerability has been exploited, as an attacker with enough privilege could have deleted the revision where the xobject was deleted after rolling-back the deletion. But again, this operation requires high privileges on the target page (Admin right). A page with a user password xobject which have in its history a revision where the object has been deleted should be considered at risk and the password should be changed there. a diff, to ensure it's not coming from a password field. As another mitigation, admins should ensure that the user pages are properly protected: the edit right shouldn't be allowed for other users than Admin and owner of the profile (which is the default right). There is not much workaround possible for a privileged user other than upgrading XWiki.","exploit_maturity":"Proof of concept only","published":"2024-04-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-31868","description":"Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin.\n\nThe attackers can modify helium.json and exposure XSS attacks to normal users.\nThis issue affects Apache Zeppelin: from 0.8.2 before 0.11.1.\n\nUsers are recommended to upgrade to version 0.11.1, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-31867","description":"Improper Input Validation vulnerability in Apache Zeppelin.\n\nThe attackers can execute malicious queries by setting improper configuration properties to LDAP search filter.\nThis issue affects Apache Zeppelin: from 0.8.2 before 0.11.1.\n\nUsers are recommended to upgrade to version 0.11.1, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-31865","description":"Improper Input Validation vulnerability in Apache Zeppelin.\n\nThe attackers can call updating cron API with invalid or improper privileges so that the notebook can run with the privileges.\n\nThis issue affects Apache Zeppelin: from 0.8.2 before 0.11.1.\n\nUsers are recommended to upgrade to version 0.11.1, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-31863","description":"Authentication Bypass by Spoofing vulnerability by replacing to exsiting notes in Apache Zeppelin.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0.\n\nUsers are recommended to upgrade to version 0.11.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-31862","description":"Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0.\n\nUsers are recommended to upgrade to version 0.11.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-31860","description":"Improper Input Validation vulnerability in Apache Zeppelin.\n\nBy adding relative path indicators(E.g ..), attackers can see the contents for any files in the filesystem that the server account can access. \nThis issue affects Apache Zeppelin: from 0.9.0 before 0.11.0.\n\nUsers are recommended to upgrade to version 0.11.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-04-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-47894","description":"Improper Input Validation vulnerability in Apache Zeppelin SAP.This issue affects Apache Zeppelin SAP: from 0.8.0 before 0.11.0.\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\nFor more information, the fix already was merged in the source code but Zeppelin decided to retire the SAP component\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.","exploit_maturity":"No public exploit","published":"2024-04-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-28656","description":"Cross-Site Request Forgery (CSRF) vulnerability in Credential page of Apache Zeppelin allows an attacker to submit malicious request. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.","exploit_maturity":"No public exploit","published":"2024-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-29834","description":"This vulnerability allows authenticated users with produce or consume permissions to perform unauthorized operations on partitioned topics, such as unloading topics and triggering compaction. These management operations should be restricted to users with the tenant admin role or superuser role. An authenticated user with produce permission can create subscriptions and update subscription properties on partitioned topics, even though this should be limited to users with consume permissions. This impact analysis assumes that Pulsar has been configured with the default authorization provider. For custom authorization providers, the impact could be slightly different. Additionally, the vulnerability allows an authenticated user to read, create, modify, and delete namespace properties in any namespace in any tenant. In Pulsar, namespace properties are reserved for user provided metadata about the namespace.\n\nThis issue affects Apache Pulsar versions from 2.7.1 to 2.10.6, from 2.11.0 to 2.11.4, from 3.0.0 to 3.0.3, from 3.1.0 to 3.1.3, and from 3.2.0 to 3.2.1. \n\n3.0 Apache Pulsar users should upgrade to at least 3.0.4.\n3.1 and 3.2 Apache Pulsar users should upgrade to at least 3.2.2.\n\nUsers operating versions prior to those listed above should upgrade to the aforementioned patched versions or newer versions.","exploit_maturity":"No public exploit","published":"2024-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-1300","description":"A vulnerability in the Eclipse Vert.x toolkit causes a memory leak in TCP servers configured with TLS and SNI support. When processing an unknown SNI server name assigned the default certificate instead of a mapped certificate, the SSL context is erroneously cached in the server name map, leading to memory exhaustion. This flaw allows attackers to send TLS client hello messages with fake server names, triggering a JVM out-of-memory error.","exploit_maturity":"No public exploit","published":"2024-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50313","description":"IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for outbound TLS connections caused by a failure to honor user configuration. IBM X-Force ID: 274812.","exploit_maturity":"No public exploit","published":"2024-04-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-31033","description":"JJWT (aka Java JWT) through 0.12.5 ignores certain characters and thus a user might falsely conclude that they have a strong key. The impacted code is the setSigningKey() method within the DefaultJwtParser class and the signWith() method within the DefaultJwtBuilder class. NOTE: the vendor disputes this because the \"ignores\" behavior cannot occur (in any version) unless there is a user error in how JJWT is used, and because the version that was actually tested must have been more than six years out of date.","exploit_maturity":"Proof of concept only","published":"2024-04-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-27609","description":"Bonita before 2023.2-u2 allows stored XSS via a UI screen in the administration panel.","exploit_maturity":"No public exploit","published":"2024-04-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23449","description":"An uncaught exception in Elasticsearch \u003e= 8.4.0 and \u003c 8.11.1 occurs when an encrypted PDF is passed to an attachment processor through the REST API. The Elasticsearch ingest node that attempts to parse the PDF file will crash. This does not happen with password-protected PDF files or with unencrypted PDF files.","exploit_maturity":"No public exploit","published":"2024-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-27270","description":"IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in a specially crafted URI. IBM X-Force ID: 284576.","exploit_maturity":"No public exploit","published":"2024-03-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-23451","description":"Incorrect Authorization issue exists in the API key based security model for Remote Cluster Security, which is currently in Beta, in Elasticsearch 8.10.0 and before 8.13.0. This allows a malicious user with a valid API key for a remote cluster configured to use the new Remote Cluster Security to read arbitrary documents from any index on the remote cluster, and only if they use the Elasticsearch custom transport protocol to issue requests with the target index ID, the shard ID and the document ID. None of Elasticsearch REST API endpoints are affected by this issue.","exploit_maturity":"No public exploit","published":"2024-03-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-1023","description":"A vulnerability in the Eclipse Vert.x toolkit results in a memory leak due to using Netty FastThreadLocal data structures. Specifically, when the Vert.x HTTP client establishes connections to different hosts, triggering the memory leak. The leak can be accelerated with intimate runtime knowledge, allowing an attacker to exploit this vulnerability. For instance, a server accepting arbitrary internet addresses could serve as an attack vector by connecting to these addresses, thereby accelerating the memory leak.","exploit_maturity":"Proof of concept only","published":"2024-03-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-29025","description":"Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026 clients. The `HttpPostRequestDecoder` can be tricked to accumulate data. While the decoder can store items on the disk if configured so, there are no limits to the number of fields the form can have, an attacher can send a chunked post consisting of many small fields that will be accumulated in the `bodyListHttpData` list. The decoder cumulates bytes in the `undecodedChunk` buffer until it can decode a field, this field can cumulate data without limits. This vulnerability is fixed in 4.1.108.Final.","exploit_maturity":"Proof of concept only","published":"2024-03-25","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2024-29133","description":"Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1.\n\nUsers are recommended to upgrade to version 2.10.1, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-03-21","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2024-23821","description":"GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in the GeoServer catalog that will execute in the context of another user's browser when viewed in the GWC Demos Page. Access to the GWC Demos Page is available to all users although data security may limit users' ability to trigger the XSS. Versions 2.23.4 and 2.24.1 contain a patch for this issue.","exploit_maturity":"No public exploit","published":"2024-03-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23819","description":"GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in the GeoServer catalog that will execute in the context of another user's browser when viewed in the MapML HTML Page. The MapML extension must be installed and access to the MapML HTML Page is available to all users although data security may limit users' ability to trigger the XSS. Versions 2.23.4 and 2.24.1 contain a patch for this issue.","exploit_maturity":"No public exploit","published":"2024-03-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23818","description":"GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.3 and 2.24.1 that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in the GeoServer catalog that will execute in the context of another user's browser when viewed in the WMS GetMap OpenLayers Output Format. Access to the WMS OpenLayers Format is available to all users by default although data and service security may limit users' ability to trigger the XSS. Versions 2.23.3 and 2.24.1 contain a patch for this issue.","exploit_maturity":"No public exploit","published":"2024-03-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23643","description":"GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.2 and 2.24.1 that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in the GeoServer catalog that will execute in the context of another administrator’s browser when viewed in the GWC Seed Form. Access to the GWC Seed Form is limited to full administrators by default and granting non-administrators access to this endpoint is not recommended. Versions 2.23.2 and 2.24.1 contain a fix for this issue.","exploit_maturity":"Proof of concept only","published":"2024-03-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23642","description":"GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in the GeoServer catalog that will execute in the context of another user's browser when viewed in the WMS GetMap SVG Output Format when the Simple SVG renderer is enabled. Access to the WMS SVG Format is available to all users by default although data and service security may limit users' ability to trigger the XSS. Versions 2.23.4 and 2.24.1 contain a fix for this issue.","exploit_maturity":"No public exploit","published":"2024-03-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23640","description":"GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.3 and 2.24.0 that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in uploaded style/legend resources or in a specially crafted datastore file that will execute in the context of another user's browser when viewed in the Style Publisher. Access to the Style Publisher is available to all users although data security may limit users' ability to trigger the XSS. Versions 2.23.3 and 2.24.0 contain a fix for this issue.","exploit_maturity":"No public exploit","published":"2024-03-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23634","description":"GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file renaming vulnerability exists in versions prior to 2.23.5 and 2.24.2 that enables an authenticated administrator with permissions to modify stores through the REST Coverage Store or Data Store API to rename arbitrary files and directories with a name that does not end in `.zip`. Store file uploads rename zip files to have a `.zip` extension if it doesn't already have one before unzipping the file. This is fine for file and url upload methods where the files will be in a specific subdirectory of the data directory but, when using the external upload method, this allows arbitrary files and directories to be renamed. Renaming GeoServer files will most likely result in a denial of service, either completely preventing GeoServer from running or effectively deleting specific resources (such as a workspace, layer or style). In some cases, renaming GeoServer files could revert to the default settings for that file which could be relatively harmless like removing contact information or have more serious consequences like allowing users to make OGC requests that the customized settings would have prevented them from making. The impact of renaming non-GeoServer files depends on the specific environment although some sort of denial of service is a likely outcome. Versions 2.23.5 and 2.24.2 contain a fix for this issue.","exploit_maturity":"No public exploit","published":"2024-03-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-22258","description":"Spring Authorization Server versions 1.0.0 - 1.0.5, 1.1.0 - 1.1.5, 1.2.0 - 1.2.2 and older unsupported versions are susceptible to a PKCE Downgrade Attack for Confidential Clients.\n\nSpecifically, an application is vulnerable when a Confidential Client uses PKCE for the Authorization Code Grant.\n\nAn application is not vulnerable when a Public Client uses PKCE for the Authorization Code Grant.\n\n","exploit_maturity":"No public exploit","published":"2024-03-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-51445","description":"GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.3 and 2.24.0 that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in uploaded style/legend resources that will execute in the context of another administrator's browser when viewed in the REST Resources API. Access to the REST Resources API is limited to full administrators by default and granting non-administrators access to this endpoint should be carefully considered as it may allow access to files containing sensitive information. Versions 2.23.3 and 2.24.0 contain a patch for this issue.","exploit_maturity":"Proof of concept only","published":"2024-03-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-27439","description":"An error in the evaluation of the fetch metadata headers could allow a bypass of the CSRF protection in Apache Wicket.\nThis issue affects Apache Wicket: from 9.1.0 through 9.16.0, and the milestone releases for the 10.0 series.\nApache Wicket 8.x does not support CSRF protection via the fetch metadata headers and as such is not affected.\n\nUsers are recommended to upgrade to version 9.17.0 or 10.0.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-03-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-24683","description":"Improper Input Validation vulnerability in Apache Hop Engine.This issue affects Apache Hop Engine: before 2.8.0.\n\nUsers are recommended to upgrade to version 2.8.0, which fixes the issue.\n\nWhen Hop Server writes links to the PrepareExecutionPipelineServlet page one of the parameters provided to the user was not properly escaped.\nThe variable not properly escaped is the \"id\", which is not directly accessible by users creating pipelines making the risk of exploiting this low.\n\nThis issue only affects users using the Hop Server component and does not directly affect the client.","exploit_maturity":"No public exploit","published":"2024-03-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-28128","description":"Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with a specially crafted certain parameter.","exploit_maturity":"No public exploit","published":"2024-03-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23944","description":"Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It allows an attacker to monitor child znodes by attaching a persistent watcher (addWatch command) to a parent which the attacker has already access to. ZooKeeper server doesn't do ACL check when the persistent watcher is triggered and as a consequence, the full path of znodes that a watch event gets triggered upon is exposed to the owner of the watcher. It's important to note that only the path is exposed by this vulnerability, not the data of znode, but since znode path can contain sensitive information like user name or login ID, this issue is potentially critical.\n\nUsers are recommended to upgrade to version 3.9.2, 3.8.4 which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23672","description":"Denial of Service via incomplete cleanup vulnerability in Apache Tomcat. It was possible for WebSocket clients to keep WebSocket connections open leading to increased resource consumption.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18, from 9.0.0-M1 through 9.0.85, from 8.5.0 through 8.5.98.\n\nOlder, EOL versions may also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.0-M17, 10.1.19, 9.0.86 or 8.5.99 which fix the issue.","exploit_maturity":"No public exploit","published":"2024-03-13","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2024-28098","description":"The vulnerability allows authenticated users with only produce or consume permissions to modify topic-level policies, such as retention, TTL, and offloading settings. These management operations should be restricted to users with the tenant admin role or super user role.\n\nThis issue affects Apache Pulsar versions from 2.7.1 to 2.10.5, from 2.11.0 to 2.11.3, from 3.0.0 to 3.0.2, from 3.1.0 to 3.1.2, and 3.2.0. \n\n2.10 Apache Pulsar users should upgrade to at least 2.10.6.\n2.11 Apache Pulsar users should upgrade to at least 2.11.4.\n3.0 Apache Pulsar users should upgrade to at least 3.0.3.\n3.1 Apache Pulsar users should upgrade to at least 3.1.3.\n3.2 Apache Pulsar users should upgrade to at least 3.2.1.\n\nUsers operating versions prior to those listed above should upgrade to the aforementioned patched versions or newer versions.","exploit_maturity":"No public exploit","published":"2024-03-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-28162","description":"In Jenkins Delphix Plugin 3.0.1 through 3.1.0 (both inclusive) a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections fails to take effect until Jenkins is restarted when switching from disabled validation to enabled validation.","exploit_maturity":"No public exploit","published":"2024-03-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-28161","description":"In Jenkins Delphix Plugin 3.0.1, a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections is disabled by default.","exploit_maturity":"No public exploit","published":"2024-03-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-28159","description":"A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers with Item/Read permission to trigger a build.","exploit_maturity":"No public exploit","published":"2024-03-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-28158","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build.","exploit_maturity":"No public exploit","published":"2024-03-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-28156","description":"Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b_3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure Build Monitor Views.","exploit_maturity":"Forecast only","published":"2024-03-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-28155","description":"Jenkins AppSpider Plugin 1.0.16 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about available scan config names, engine group names, and client names.","exploit_maturity":"No public exploit","published":"2024-03-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-28154","description":"Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default.","exploit_maturity":"No public exploit","published":"2024-03-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-28152","description":"In Jenkins Bitbucket Branch Source Plugin 866.vdea_7dcd3008e and earlier, except 848.850.v6a_a_2a_234a_c81, when discovering pull requests from forks, the trust policy \"Forks in the same account\" allows changes to Jenkinsfiles from users without write access to the project when using Bitbucket Server.","exploit_maturity":"No public exploit","published":"2024-03-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-28151","description":"Jenkins HTML Publisher Plugin 1.32 and earlier archives invalid symbolic links in report directories on agents and recreates them on the controller, allowing attackers with Item/Configure permission to determine whether a path on the Jenkins controller file system exists, without being able to access it.","exploit_maturity":"No public exploit","published":"2024-03-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-28150","description":"Jenkins HTML Publisher Plugin 1.32 and earlier does not escape job names, report names, and index page titles shown as part of the report frame, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2024-03-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-28149","description":"Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclusive) does not properly sanitize input, allowing attackers with Item/Configure permission to implement cross-site scripting (XSS) attacks and to determine whether a path on the Jenkins controller file system exists.","exploit_maturity":"No public exploit","published":"2024-03-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-2215","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting future build step executions.","exploit_maturity":"No public exploit","published":"2024-03-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50740","description":"In Apache Linkis \u003c=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module. \nWe recommend users upgrade the version of Linkis to version 1.5.0","exploit_maturity":"No public exploit","published":"2024-03-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-27140","description":"** UNSUPPORTED WHEN ASSIGNED **\n\nImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Archiva.\n\nThis issue affects Apache Archiva: from 2.0.0.\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. Alternatively, you could configure a HTTP proxy in front of your Archiva instance to only forward requests that do not have malicious characters in the URL.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.","exploit_maturity":"No public exploit","published":"2024-03-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50378","description":"Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8  \n\n Impact : As it will be stored XSS, Could be exploited to perform unauthorized actions, varying from data access to session hijacking and delivering malicious payloads. \n\nUsers are recommended to upgrade to version 2.7.8 which fixes this issue.","exploit_maturity":"No public exploit","published":"2024-03-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50312","description":"IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.2 could provide weaker than expected security for outbound TLS connections caused by a failure to honor user configuration. IBM X-Force ID: 274711.","exploit_maturity":"No public exploit","published":"2024-03-01","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-1722","description":"A flaw was found in Keycloak. In certain conditions, this issue may allow a remote unauthenticated attacker to block other accounts from logging in.","exploit_maturity":"No public exploit","published":"2024-02-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-51775","description":"The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.","exploit_maturity":"Proof of concept only","published":"2024-02-29","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-5617","description":"\nHitachi Vantara Pentaho Data Integration \u0026 Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat when a server error is encountered.\n\n\n\n","exploit_maturity":"No public exploit","published":"2024-02-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-21742","description":"Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message.\nThis can be exploited by an attacker to add unintended headers to MIME messages.","exploit_maturity":"No public exploit","published":"2024-02-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50380","description":"XML External Entity injection in apache ambari versions \u003c= 2.7.7, Users are recommended to upgrade to version 2.7.8, which fixes this issue.\n\nMore Details:\n\nOozie Workflow Scheduler had a vulnerability that allowed for root-level file reading and privilege escalation from low-privilege users. The vulnerability was caused through lack of proper user input validation.\n\nThis vulnerability is known as an XML External Entity (XXE) injection attack. Attackers can exploit XXE vulnerabilities to read arbitrary files on the server, including sensitive system files. In theory, it might be possible to use this to escalate privileges.","exploit_maturity":"No public exploit","published":"2024-02-27","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-26138","description":"The XWiki licensor application, which manages and enforce application licenses for paid extensions, includes the document `Licenses.Code.LicenseJSON` that provides information for admins regarding active licenses. This document is public and thus exposes this information publicly. The information includes the instance's id as well as first and last name and email of the license owner. This is a leak of information that isn't supposed to be public. The instance id allows associating data on the active installs data with the concrete XWiki instance. Active installs assures that \"there's no way to find who's having a given UUID\" (referring to the instance id). Further, the information who the license owner is and information about the obtained licenses can be used for targeted phishing attacks. Also, while user information is normally public, email addresses might only be displayed obfuscated, depending on the configuration. This has been fixed in Application Licensing 1.24.2. There are no known workarounds besides upgrading.","exploit_maturity":"No public exploit","published":"2024-02-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-25151","description":"The Calendar module in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions does not escape user supplied data in the default notification email template, which allows remote authenticated users to inject arbitrary web script or HTML via the title of a calendar event or the user's name. This may lead to a content spoofing or cross-site scripting (XSS) attacks depending on the capability of the receiver's mail client.","exploit_maturity":"No public exploit","published":"2024-02-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-26270","description":"The Account Settings page in Liferay Portal 7.4.3.76 through 7.4.3.99, and Liferay DXP 2023.Q3 before patch 5, and 7.4 update 76 through 92 embeds the user’s hashed password in the page’s HTML source, which allows man-in-the-middle attackers to steal a user's hashed password.","exploit_maturity":"No public exploit","published":"2024-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-26268","description":"User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 8, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to determine if an account exist in the application by comparing the request's response time.","exploit_maturity":"No public exploit","published":"2024-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-26267","description":"In Liferay Portal 7.2.0 through 7.4.3.25, and older unsupported versions, and Liferay DXP 7.4 before update 26, 7.3 before update 5, 7.2 before fix pack 19, and older unsupported versions the default value of the portal property `http.header.version.verbosity` is set to `full`, which allows remote attackers to easily identify the version of the application that is running and the vulnerabilities that affect that version via 'Liferay-Portal` response header.","exploit_maturity":"No public exploit","published":"2024-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-26265","description":"The Image Uploader module in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Liferay DXP 7.4 before update 16, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions relies on a request parameter to limit the size of files that can be uploaded, which allows remote authenticated users to upload arbitrarily large files to the system's temp folder by modifying the `maxFileSize` parameter.","exploit_maturity":"No public exploit","published":"2024-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-26140","description":"com.yetanalytics/lrs is the Yet Analytics Core LRS Library. Prior to version 1.2.17 of the LRS library and version 0.7.5 of SQL LRS, a maliciously crafted xAPI statement could be used to perform script or other tag injection in the LRS Statement Browser. The problem is patched in version 1.2.17 of the LRS library and version 0.7.5 of SQL LRS. No known workarounds exist.","exploit_maturity":"No public exploit","published":"2024-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-25609","description":"HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 service pack 3, 7.2 fix pack 15 through 18, and older unsupported versions can be circumvented by using two forward slashes, which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, and (3) others parameters that rely on HtmlUtil.escapeRedirect. This vulnerability is the result of an incomplete fix in CVE-2022-28977.","exploit_maturity":"No public exploit","published":"2024-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-25608","description":"HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7.4 before update 19, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions can be circumvented by using the 'REPLACEMENT CHARACTER' (U+FFFD), which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, (3) `noSuchEntryRedirect` parameter, and (4) others parameters that rely on HtmlUtil.escapeRedirect.","exploit_maturity":"Working exploit published","published":"2024-02-20","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2024-25605","description":"The Journal module in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions grants guest users view permission to web content templates by default, which allows remote attackers to view any template via the UI or API.","exploit_maturity":"No public exploit","published":"2024-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-25604","description":"Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions does not properly check user permissions, which allows remote authenticated users with the VIEW user permission to edit their own permission via the User and Organizations section of the Control Panel.","exploit_maturity":"No public exploit","published":"2024-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-25150","description":"Information disclosure vulnerability in the Control Panel in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions allows remote authenticated users to obtain a user's full name from the page's title by enumerating user screen names.","exploit_maturity":"No public exploit","published":"2024-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-25149","description":"Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions does not properly restrict membership of a child site when the \"Limit membership to members of the parent site\" option is enabled, which allows remote authenticated users to add users who are not a member of the parent site to a child site. The added user may obtain permission to perform unauthorized actions in the child site.","exploit_maturity":"No public exploit","published":"2024-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-5190","description":"Open redirect vulnerability in the Countries Management’s edit region page in Liferay Portal 7.4.3.45 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 45 through 92 allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_address_web_internal_portlet_CountriesManagementAdminPortlet_redirect parameter.","exploit_maturity":"No public exploit","published":"2024-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50270","description":"Session Fixation Apache DolphinScheduler before version 3.2.0, which session is still valid after the password change.\n\nUsers are recommended to upgrade to version 3.2.1, which fixes this issue.","exploit_maturity":"No public exploit","published":"2024-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-44308","description":"Open redirect vulnerability in adaptive media administration page in Liferay DXP 2023.Q3 before patch 6, and 7.4 GA through update 92 allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_adaptive_media_web_portlet_AMPortlet_redirect parameter.","exploit_maturity":"No public exploit","published":"2024-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45320","description":"Liferay Portal before 7.4.3.16 and Liferay DXP before 7.2 fix pack 19, 7.3 before update 6, and 7.4 before update 16 allow remote authenticated users to become the owner of a wiki page by editing the wiki page.","exploit_maturity":"No public exploit","published":"2024-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-29038","description":"Liferay Portal 7.2.0 through 7.3.5, and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-the-middle or shoulder surfing attacks to steal user's password reminder answers.","exploit_maturity":"No public exploit","published":"2024-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-26308","description":"Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26.\n\nUsers are recommended to upgrade to version 1.26, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-02-19","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2024-20980","description":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data as well as unauthorized read access to a subset of Oracle BI Publisher accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20958","description":"Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Installed Base, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data as well as unauthorized read access to a subset of Oracle Installed Base accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20951","description":"Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Interaction History, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data as well as unauthorized read access to a subset of Oracle Customer Interaction History accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20949","description":"Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Interaction History, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data as well as unauthorized read access to a subset of Oracle Customer Interaction History accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20947","description":"Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Common Applications accessible data as well as unauthorized read access to a subset of Oracle Common Applications accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20945","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and 22.3.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-20943","description":"Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data as well as unauthorized read access to a subset of Oracle Knowledge Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20941","description":"Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: HTML UI). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Installed Base, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data as well as unauthorized read access to a subset of Oracle Installed Base accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20939","description":"Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Admin Console). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle CRM Technical Foundation. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20937","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are Prior to 9.2.8.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20935","description":"Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Installed Base, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data as well as unauthorized read access to a subset of Oracle Installed Base accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20933","description":"Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Installed Base, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data as well as unauthorized read access to a subset of Oracle Installed Base accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20929","description":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data as well as unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20921","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and 22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20919","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and 22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20915","description":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Login - SSO). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Application Object Library. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20913","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20907","description":"Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Web Applications Desktop Integrator, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Web Applications Desktop Integrator accessible data as well as unauthorized read access to a subset of Oracle Web Applications Desktop Integrator accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-45860","description":"In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequate permission checking, which could enable unauthorized clients to access data from files stored on a member's filesystem.","exploit_maturity":"No public exploit","published":"2024-02-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-25125","description":"Digdag is an open source tool that to build, run, schedule, and monitor complex pipelines of tasks across various platforms. Treasure Data's digdag workload automation system is susceptible to a path traversal vulnerability if it's configured to store log files locally. This issue may lead to information disclosure and has been addressed in release version 0.10.5.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.","exploit_maturity":"No public exploit","published":"2024-02-14","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-1459","description":"A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories.","exploit_maturity":"No public exploit","published":"2024-02-12","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-25146","description":"Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 18, and older unsupported versions returns with different responses depending on whether a site does not exist or if the user does not have permission to access the site, which allows remote attackers to discover the existence of sites by enumerating URLs. This vulnerability occurs if locale.prepend.friendly.url.style=2 and if a custom 404 page is used.","exploit_maturity":"No public exploit","published":"2024-02-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-25144","description":"The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 6, 7.2 before fix pack 19, and older unsupported versions does not check the URL of the IFrame, which allows remote authenticated users to cause a denial-of-service (DoS) via a self referencing IFrame.","exploit_maturity":"No public exploit","published":"2024-02-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-47798","description":"Account lockout in Liferay Portal 7.2.0 through 7.3.0, and older unsupported versions, and Liferay DXP 7.2 before fix pack 5, and older unsupported versions does not invalidate existing user sessions, which allows remote authenticated users to remain authenticated after an account has been locked.","exploit_maturity":"No public exploit","published":"2024-02-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-25143","description":"The Document and Media widget In Liferay Portal 7.2.0 through 7.3.6, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 13, and older unsupported versions, does not limit resource consumption when generating a preview image, which allows remote authenticated users to cause a denial of service (memory consumption) via crafted PNG images.","exploit_maturity":"No public exploit","published":"2024-02-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-24823","description":"Graylog is a free and open log management platform. Starting in version 4.3.0 and prior to versions 5.1.11 and 5.2.4, reauthenticating with an existing session cookie would re-use that session id, even if for different user credentials. In this case, the pre-existing session could be used to gain elevated access to an existing Graylog login session, provided the malicious user could successfully inject their session cookie into someone else's browser. The complexity of such an attack is high, because it requires presenting a spoofed login screen and injection of a session cookie into an existing browser, potentially through a cross-site scripting attack. No such attack has been discovered. Graylog 5.1.11 and 5.2.4, and any versions of the 6.0 development branch, contain patches to not re-use sessions under any circumstances. Some workarounds are available. Using short session expiration and explicit log outs of unused sessions can help limiting the attack vector. Unpatched this vulnerability exists, but is relatively hard to exploit. A proxy could be leveraged to clear the `authentication` cookie for the Graylog server URL for the `/api/system/sessions` endpoint, as that is the only one vulnerable.","exploit_maturity":"No public exploit","published":"2024-02-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-39196","description":"Improper Authentication vulnerability in Apache Ozone.\n\nThe vulnerability allows an attacker to download metadata internal to the Storage Container Manager service without proper authentication.\nThe attacker is not allowed to do any modification within the Ozone Storage Container Manager service using this vulnerability.\nThe accessible metadata does not contain sensitive information that can be used to exploit the system later on, and the accessible data does not make it possible to gain access to actual user data within Ozone.\nThis issue affects Apache Ozone: 1.2.0 and subsequent releases up until 1.3.0.\n\nUsers are recommended to upgrade to version 1.4.0, which fixes the issue.","exploit_maturity":"No public exploit","published":"2024-02-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-34042","description":"The spring-security.xsd file inside the \nspring-security-config jar is world writable which means that if it were\n extracted it could be written by anyone with access to the file system.\n\n\nWhile there are no known exploits, this is an example of “CWE-732: \nIncorrect Permission Assignment for Critical Resource” and could result \nin an exploit. Users should update to the latest version of Spring \nSecurity to mitigate any future exploits found around this issue.\n\n\n\n\n\n","exploit_maturity":"No public exploit","published":"2024-02-05","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-23635","description":"AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to 1.7.5, there is a potential for a mutation XSS (mXSS) vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the `preserveComments` directive must be enabled in your policy file. As a result, certain crafty inputs can result in elements in comment tags being interpreted as executable when using AntiSamy's sanitized output. Patched in AntiSamy 1.7.5 and later. ","exploit_maturity":"No public exploit","published":"2024-02-02","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2024-22236","description":"In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution is vulnerable to local information disclosure via temporary directory created with unsafe permissions through the shaded com.google.guava:guava dependency in the org.springframework.cloud:spring-cloud-contract-shade dependency.\n\n\n\n\n\n","exploit_maturity":"No public exploit","published":"2024-01-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-24565","description":"CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY FROM function to import arbitrary file content into database tables, resulting in information leakage. This vulnerability is patched in 5.3.9, 5.4.8, 5.5.4, and 5.6.1.","exploit_maturity":"Working exploit published","published":"2024-01-30","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-23905","description":"Jenkins Red Hat Dependency Analytics Plugin 0.7.1 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.","exploit_maturity":"No public exploit","published":"2024-01-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23903","description":"Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.","exploit_maturity":"No public exploit","published":"2024-01-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23902","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier allows attackers to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2024-01-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23901","description":"Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group, allowing attackers to configure and share a project, resulting in a crafted Pipeline being built by Jenkins during the next scan of the group.","exploit_maturity":"No public exploit","published":"2024-01-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23900","description":"Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects, allowing attackers with Item/Configure permission to create or replace any config.xml files on the Jenkins controller file system with content not controllable by the attackers.","exploit_maturity":"No public exploit","published":"2024-01-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-23899","description":"Jenkins Git server Plugin 99.va_0826a_b_cdfa_d and earlier does not disable a feature of its command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing attackers with Overall/Read permission to read content from arbitrary files on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2024-01-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-22497","description":"Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL.","exploit_maturity":"Proof of concept only","published":"2024-01-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-22496","description":"Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter.","exploit_maturity":"Proof of concept only","published":"2024-01-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-22490","description":"Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter.","exploit_maturity":"Proof of concept only","published":"2024-01-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23688","description":"Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's private key isn't compromised, only the session key generated for specific peer communication is exposed.","exploit_maturity":"No public exploit","published":"2024-01-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23686","description":"DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.","exploit_maturity":"Proof of concept only","published":"2024-01-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23685","description":"Hard-coded credentials in mod-remote-storage versions under 1.7.2 and from 2.0.0 to 2.0.3 allows unauthorized users to gain read access to mod-inventory-storage records including instances, holdings, items, contributor-types, and identifier-types.","exploit_maturity":"No public exploit","published":"2024-01-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-23680","description":"AWS Encryption SDK for Java versions 2.0.0 to 2.2.0 and less than 1.9.0 incorrectly validates some invalid ECDSA signatures.","exploit_maturity":"No public exploit","published":"2024-01-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-21733","description":"Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43. Other, EOL versions may also be affected.\n\nUsers are recommended to upgrade to version 8.5.64 onwards or 9.0.44 onwards, which contain a fix for the issue.","exploit_maturity":"Proof of concept only","published":"2024-01-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-0758","description":"MolecularFaces before 0.3.0 is vulnerable to cross site scripting. A remote attacker can execute arbitrary JavaScript in the context of a victim browser via crafted molfiles.","exploit_maturity":"No public exploit","published":"2024-01-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-22491","description":"A Stored Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter.","exploit_maturity":"Proof of concept only","published":"2024-01-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-20987","description":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data as well as unauthorized read access to a subset of Oracle BI Publisher accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20979","description":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 6.4.0.0.0, 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data as well as unauthorized read access to a subset of Oracle BI Publisher accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20950","description":"Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Interaction History, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data as well as unauthorized read access to a subset of Oracle Customer Interaction History accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20948","description":"Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Setup, Admin). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data as well as unauthorized read access to a subset of Oracle Knowledge Management accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20944","description":"Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iSupport, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iSupport accessible data as well as unauthorized read access to a subset of Oracle iSupport accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20942","description":"Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: LOV). Supported versions that are affected are 11.5, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized read access to a subset of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20940","description":"Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Create, Update, Authoring Flow). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data as well as unauthorized read access to a subset of Oracle Knowledge Management accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20938","description":"Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: ECC). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iStore accessible data as well as unauthorized read access to a subset of Oracle iStore accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20936","description":"Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data as well as unauthorized read access to a subset of Oracle One-to-One Fulfillment accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20934","description":"Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Installed Base, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data as well as unauthorized read access to a subset of Oracle Installed Base accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20928","description":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Content accessible data as well as unauthorized read access to a subset of Oracle WebCenter Content accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20926","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and 22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-01-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-20908","description":"Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2024-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2024-20904","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Pod Admin). Supported versions that are affected are 6.4.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2024-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-50290","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr.\nThe Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designed to work for known secret Java system properties. Environment variables cannot be strictly defined in Solr, like Java system properties can be, and may be set for the entire host, unlike Java system properties which are set per-Java-proccess.\n\nThe Solr Metrics API is protected by the \"metrics-read\" permission.\nTherefore, Solr Clouds with Authorization setup will only be vulnerable via users with the \"metrics-read\" permission.\nThis issue affects Apache Solr: from 9.0.0 before 9.3.0.\n\nUsers are recommended to upgrade to version 9.3.0 or later, in which environment variables are not published via the Metrics API.\n\n","exploit_maturity":"Working exploit published","published":"2024-01-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-46749","description":"Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when used together with path rewriting \n\nMitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+, or ensure `blockSemicolon` is enabled (this is the default).\n\n","exploit_maturity":"No public exploit","published":"2024-01-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2024-22493","description":"A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML.","exploit_maturity":"Proof of concept only","published":"2024-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2024-22492","description":"A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML.","exploit_maturity":"Proof of concept only","published":"2024-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-6149","description":"\nQualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize the plugin and configure potential a rouge endpoint via which it was possible to control response for certain request which could be injected with XXE payloads leading to XXE while processing the response data","exploit_maturity":"No public exploit","published":"2024-01-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-6148","description":"Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure or edit jobs to utilize the plugin to configure a potential rouge endpoint via which it was possible to control response for certain request which could be injected with XSS payloads leading to XSS while processing the response data","exploit_maturity":"No public exploit","published":"2024-01-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-6147","description":"Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize the plugin and configure potential a rouge endpoint via which it was possible to control response for certain request which could be injected with XXE payloads leading to XXE while processing the response data","exploit_maturity":"No public exploit","published":"2024-01-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-50572","description":"An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.","exploit_maturity":"No public exploit","published":"2023-12-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50570","description":"An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only for cases in which the developer supplies invalid arguments. The product is not intended to always halt for contrived inputs.","exploit_maturity":"No public exploit","published":"2023-12-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-51079","description":"A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java class lookups. NOTE: the vendor disputes this because \"the only thing that you could expect is that the parser will take a crazy amount of time to complete its task.\"","exploit_maturity":"No public exploit","published":"2023-12-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-51074","description":"json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse() method.","exploit_maturity":"No public exploit","published":"2023-12-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-27150","description":"openCRX 5.2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name field after creation of a Tracker in Manage Activity.","exploit_maturity":"Proof of concept only","published":"2023-12-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-6927","description":"A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode \"form_post.jwt\" which could be used to bypass the security patch implemented to address CVE-2023-6134.","exploit_maturity":"No public exploit","published":"2023-12-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-6911","description":"Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a malicious payload into the Registry feature of the Management Console.\n","exploit_maturity":"No public exploit","published":"2023-12-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-5236","description":"A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service.","exploit_maturity":"No public exploit","published":"2023-12-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-3629","description":"A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.","exploit_maturity":"No public exploit","published":"2023-12-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-3628","description":"A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.","exploit_maturity":"No public exploit","published":"2023-12-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-6835","description":"Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could be manipulated.","exploit_maturity":"No public exploit","published":"2023-12-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50720","description":"XWiki Platform is a generic wiki platform. Prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the email addresses of users even when obfuscation of email addresses is enabled. To demonstrate the vulnerability, search for `objcontent:email*` using XWiki's regular search interface. This has been fixed in XWiki 14.10.15, 15.5.2 and 15.7RC1 by not indexing email address properties when obfuscation is enabled. There are no known workarounds for this vulnerability.\n","exploit_maturity":"Working exploit published","published":"2023-12-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-30867","description":"In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fuzzy search, such as job names, role names, etc. The sql syntax :select * from table where jobName like '%jobName%'. However, the jobName field may receive illegal parameters, leading to SQL injection. This could potentially result in information leakage.\n\nMitigation:\n\nUsers are recommended to upgrade to version 2.1.2, which fixes the issue.\n\n","exploit_maturity":"No public exploit","published":"2023-12-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-6134","description":"A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks. This flaw is the result of an incomplete fix for CVE-2020-10748.","exploit_maturity":"No public exploit","published":"2023-12-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50137","description":"JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office.","exploit_maturity":"No public exploit","published":"2023-12-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50102","description":"JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS).","exploit_maturity":"No public exploit","published":"2023-12-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50101","description":"JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing.","exploit_maturity":"No public exploit","published":"2023-12-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50100","description":"JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing.","exploit_maturity":"No public exploit","published":"2023-12-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-46750","description":"URL Redirection to Untrusted Site ('Open Redirect') vulnerability when \"form\" authentication is used in Apache Shiro.\nMitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+.\n","exploit_maturity":"Proof of concept only","published":"2023-12-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-6379","description":"Cross-site scripting (XSS) vulnerability in Alkacon Software Open CMS, affecting versions 14 and 15 of the 'Mercury' template. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload to a victim and partially take control of their browsing session.","exploit_maturity":"Working exploit published","published":"2023-12-13","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-50779","description":"Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified token.","exploit_maturity":"No public exploit","published":"2023-12-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50777","description":"Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2023-12-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50776","description":"Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-12-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50775","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to copy jobs.","exploit_maturity":"No public exploit","published":"2023-12-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50773","description":"Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2023-12-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50772","description":"Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-12-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50771","description":"Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.","exploit_maturity":"No public exploit","published":"2023-12-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50770","description":"Jenkins OpenId Connect Authentication Plugin 2.6 and earlier stores a password of a local user account used as an anti-lockout feature in a recoverable format, allowing attackers with access to the Jenkins controller file system to recover the plain text password of that account, likely gaining administrator access to Jenkins.","exploit_maturity":"No public exploit","published":"2023-12-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50769","description":"Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-12-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50767","description":"Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as XML.","exploit_maturity":"No public exploit","published":"2023-12-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-50765","description":"A missing permission check in Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier allows attackers with Overall/Read permission to read the contents of a Groovy script by knowing its ID.","exploit_maturity":"No public exploit","published":"2023-12-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-47327","description":"The \"Create a Space\" feature in Silverpeas Core 6.3.1 is reserved for use by administrators. This function suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL.","exploit_maturity":"No public exploit","published":"2023-12-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-47325","description":"Silverpeas Core 6.3.1 administrative \"Bin\" feature is affected by broken access control. A user with low privileges is able to navigate directly to the bin, revealing all deleted spaces. The user can then restore or permanently delete the spaces.","exploit_maturity":"Proof of concept only","published":"2023-12-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-47324","description":"Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting (XSS) via the message/notification feature.","exploit_maturity":"No public exploit","published":"2023-12-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-47321","description":"Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control via the \"Porlet Deployer\" which allows administrators to deploy .WAR portlets.","exploit_maturity":"No public exploit","published":"2023-12-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-26920","description":"fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.","exploit_maturity":"No public exploit","published":"2023-12-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-49487","description":"JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management department.","exploit_maturity":"No public exploit","published":"2023-12-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-49486","description":"JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department.","exploit_maturity":"No public exploit","published":"2023-12-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-49485","description":"JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management department.","exploit_maturity":"No public exploit","published":"2023-12-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-6393","description":"A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial \"completion\" context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contains sensitive information, and could allow a malicious user to benefit from a POST request returning the response that is meant for another user, gaining access to sensitive data.","exploit_maturity":"No public exploit","published":"2023-12-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-26154","description":"Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the package pubnub before 6.19.0; all versions of the package github.com/pubnub/go; versions of the package github.com/pubnub/go/v7 before 7.2.0; versions of the package pubnub before 7.3.0; versions of the package pubnub/pubnub before 6.1.0; versions of the package pubnub before 5.3.0; versions of the package pubnub before 0.4.0; versions of the package pubnub/c-core before 4.5.0; versions of the package com.pubnub:pubnub-kotlin before 7.7.0; versions of the package pubnub/swift before 6.2.0; versions of the package pubnub before 5.2.0; versions of the package pubnub before 4.3.0 are vulnerable to Insufficient Entropy via the getKey function, due to inefficient implementation of the AES-256-CBC cryptographic algorithm. The provided encrypt function is less secure when hex encoding and trimming are applied, leaving half of the bits in the key always the same for every encoded message or file.\r\r**Note:**\r\rIn order to exploit this vulnerability, the attacker needs to invest resources in preparing the attack and brute-force the encryption.","exploit_maturity":"No public exploit","published":"2023-12-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-49620","description":"Before DolphinScheduler version 3.1.0, the login user could delete UDF function in the resource center unauthorized (which almost used in sql task), with unauthorized access vulnerability (IDOR), but after version 3.1.0 we fixed this issue. We mark this cve as moderate level because it still requires user login to operate, please upgrade to version 3.1.0 to avoid this vulnerability","exploit_maturity":"No public exploit","published":"2023-11-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-49674","description":"A missing permission check in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password.","exploit_maturity":"No public exploit","published":"2023-11-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-49653","description":"Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.","exploit_maturity":"No public exploit","published":"2023-11-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-34055","description":"In Spring Boot versions 2.7.0 - 2.7.17, 3.0.0-3.0.12 and 3.1.0-3.1.5, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.\n\nSpecifically, an application is vulnerable when all of the following are true:\n\n * the application uses Spring MVC or Spring WebFlux\n * org.springframework.boot:spring-boot-actuator is on the classpath","exploit_maturity":"No public exploit","published":"2023-11-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-6299","description":"A vulnerability, which was classified as problematic, has been found in Apryse iText 8.0.1. This issue affects some unknown processing of the file PdfDocument.java of the component Reference Table Handler. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 8.0.2 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-246125 was assigned to this vulnerability. NOTE: The vendor was contacted early about this vulnerability. The fix was introduced in the iText 8.0.2 release on October 25th 2023, prior to the disclosure.","exploit_maturity":"No public exploit","published":"2023-11-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-6298","description":"A vulnerability classified as problematic was found in Apryse iText 8.0.2. This vulnerability affects the function main of the file PdfDocument.java. The manipulation leads to improper validation of array index. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The identifier of this vulnerability is VDB-246124. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. A statement published afterwards explains that the exception is not a vulnerability and the identified CWEs might not apply to the software.","exploit_maturity":"No public exploit","published":"2023-11-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-43123","description":"On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems.\n\nThe method File.createTempFile on unix-like systems creates a file with predefined name (so easily identifiable) and by default will create this file with the permissions -rw-r--r--. Thus, if sensitive information is written to this file, other local users can read this information.\n\nFile.createTempFile(String, String) will create a temporary file in the system temporary directory if the 'java.io.tmpdir' system property is not explicitly set. \n\nThis affects the class  https://github.com/apache/storm/blob/master/storm-core/src/jvm/org/apache/storm/utils/TopologySpoutLag.java#L99  and was introduced by  https://issues.apache.org/jira/browse/STORM-3123 \n\nIn practice, this has a very limited impact as this class is used only if ui.disable.spout.lag.monitoring\n\n is set to false, but its value is true by default.\nMoreover, the temporary file gets deleted soon after its creation.\n\nThe solution is to use  Files.createTempFile https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/nio/file/Files.html#createTempFile(java.lang.String,java.lang.String,java.nio.file.attribute.FileAttribute...)  instead.\n\nWe recommend that all users upgrade to the latest version of Apache Storm.","exploit_maturity":"No public exploit","published":"2023-11-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33202","description":"Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM encoded streams containing X.509 certificates, PKCS8 encoded keys, and PKCS7 objects. Parsing a file that has crafted ASN.1 data through the PEMParser causes an OutOfMemoryError, which can enable a denial of service attack. (For users of the FIPS Java API: BC-FJA 1.0.2.3 and earlier are affected; BC-FJA 1.0.2.4 is fixed.)","exploit_maturity":"No public exploit","published":"2023-11-23","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-47467","description":"Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory structure.","exploit_maturity":"No public exploit","published":"2023-11-22","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-40817","description":"OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field.","exploit_maturity":"Proof of concept only","published":"2023-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40816","description":"OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field.","exploit_maturity":"Proof of concept only","published":"2023-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40815","description":"OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field.","exploit_maturity":"Proof of concept only","published":"2023-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40814","description":"OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field.","exploit_maturity":"Proof of concept only","published":"2023-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40813","description":"OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation.","exploit_maturity":"Proof of concept only","published":"2023-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40812","description":"OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field.","exploit_maturity":"Proof of concept only","published":"2023-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40810","description":"OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field.","exploit_maturity":"Proof of concept only","published":"2023-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40809","description":"OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number.","exploit_maturity":"Proof of concept only","published":"2023-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-5445","description":"\nAn open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged user to modify the URL parameter for the purpose of redirecting URL request(s) to a malicious site. This impacts the dashboard area of the user interface. A user would need to be logged into ePO to trigger this vulnerability. To exploit this the attacker must change the HTTP payload post submission, prior to it reaching the ePO server.\n\n","exploit_maturity":"No public exploit","published":"2023-11-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-47112","description":"Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In affected versions access to two URLs used in both Rundeck Open Source and Process Automation products could allow authenticated users to access the URL path, which provides a list of job names and groups for any project, without the necessary authorization checks. The output of these endpoints only exposes the name of job groups and the jobs contained within the specified project. The output is read-only and the access does not allow changes to the information. This vulnerability has been patched in version 4.17.3. Users are advised to upgrade. Users unable to upgrade may block access to the two URLs used in either Rundeck Open Source or Process Automation products at a load balancer level.","exploit_maturity":"No public exploit","published":"2023-11-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40314","description":"\n\n\nCross-site scripting in bootstrap.jsp in multiple versions of OpenNMS Meridian and Horizon allows an attacker access to confidential session information. The solution is to upgrade to Horizon 32.0.5 or newer and Meridian 2023.1.9 or newer\n\n\n\n\n\n\n\n\n\n\nMeridian\nand Horizon installation instructions state that they are intended for\ninstallation within an organization's private networks and should not be\ndirectly accessible from the Internet. \n\nOpenNMS thanks \n\nMoshe Apelbaum\n\n for reporting this issue.\n\n\n\n\n\n\n\n","exploit_maturity":"No public exploit","published":"2023-11-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-48088","description":"xxl-job-admin 2.4.0 is vulnerable to Cross Site Scripting (XSS) via /xxl-job-admin/joblog/logDetailPage.","exploit_maturity":"Proof of concept only","published":"2023-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-48087","description":"xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat.","exploit_maturity":"Proof of concept only","published":"2023-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-4218","description":"In Eclipse IDE versions \u003c 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).\n","exploit_maturity":"Proof of concept only","published":"2023-11-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-4061","description":"A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitive information from the system.","exploit_maturity":"No public exploit","published":"2023-11-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-38509","description":"XWiki Platform is a generic wiki platform. In org.xwiki.platform:xwiki-platform-livetable-ui starting with version 3.5-milestone-1 and prior to versions 14.10.9 and 15.3-rc-1, the mail obfuscation configuration was not fully taken into account and is was still possible by obfuscated emails. This has been patched in XWiki 14.10.9 and XWiki 15.3-rc-1. A workaround is to modify the page `XWiki.LiveTableResultsMacros` following the patch.","exploit_maturity":"No public exploit","published":"2023-11-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-4900","description":"A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.","exploit_maturity":"No public exploit","published":"2023-11-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-31417","description":"Elasticsearch generally filters out sensitive information and credentials before logging to the audit log. It was found that this filtering was not applied when requests to Elasticsearch use certain deprecated URIs for APIs. The impact of this flaw is that sensitive information such as passwords and tokens might be printed in cleartext in Elasticsearch audit logs. Note that audit logging is disabled by default and needs to be explicitly enabled and even when audit logging is enabled, request bodies that could contain sensitive information are not printed to the audit log unless explicitly configured.","exploit_maturity":"No public exploit","published":"2023-10-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-46660","description":"Jenkins Zanata Plugin 0.6 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token hashes are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.","exploit_maturity":"No public exploit","published":"2023-10-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-46659","description":"Jenkins Edgewall Trac Plugin 1.13 and earlier does not escape the Trac website URL on the build page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2023-10-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-46658","description":"Jenkins MSTeams Webhook Trigger Plugin 0.1.1 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.","exploit_maturity":"No public exploit","published":"2023-10-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-46657","description":"Jenkins Gogs Plugin 1.0.15 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.","exploit_maturity":"No public exploit","published":"2023-10-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-46656","description":"Jenkins Multibranch Scan Webhook Trigger Plugin 1.0.9 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.","exploit_maturity":"No public exploit","published":"2023-10-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-46655","description":"Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which artifacts are published during the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure jobs to publish arbitrary files from the Jenkins controller file system to the previously configured CloudBees CD server.","exploit_maturity":"No public exploit","published":"2023-10-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-46653","description":"Jenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at the INFO level, potentially resulting in its exposure.","exploit_maturity":"No public exploit","published":"2023-10-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-46652","description":"A missing permission check in Jenkins lambdatest-automation Plugin 1.20.9 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of LAMBDATEST credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-10-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-46651","description":"Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1.","exploit_maturity":"No public exploit","published":"2023-10-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-46650","description":"Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2023-10-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37911","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 9.4-rc-1 and prior to versions 14.10.8 and 15.3-rc-1, when a document has been deleted and re-created, it is possible for users with view right on the re-created document but not on the deleted document to view the contents of the deleted document. Such a situation might arise when rights were added to the deleted document. This can be exploited through the diff feature and, partially, through the REST API by using versions such as `deleted:1` (where the number counts the deletions in the wiki and is thus guessable). Given sufficient rights, the attacker can also re-create the deleted document, thus extending the scope to any deleted document as long as the attacker has edit right in the location of the deleted document. This vulnerability has been patched in XWiki 14.10.8 and 15.3 RC1 by properly checking rights when deleted revisions of a document are accessed. The only workaround is to regularly clean deleted documents to minimize the potential exposure. Extra care should be taken when deleting sensitive documents that are protected individually (and not, e.g., by being placed in a protected space) or deleting a protected space as a whole.","exploit_maturity":"Proof of concept only","published":"2023-10-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-31580","description":"light-oauth2 before version 2.1.27 obtains the public key without any verification. This could allow attackers to authenticate to the application with a crafted JWT token.","exploit_maturity":"Proof of concept only","published":"2023-10-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-44483","description":"All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.","exploit_maturity":"No public exploit","published":"2023-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-45280","description":"Yamcs 5.8.6 allows XSS (issue 2 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a way to upload an HTML file containing arbitrary JavaScript and then navigate to it. Once the user opens the file, the browser will execute the arbitrary JavaScript.","exploit_maturity":"No public exploit","published":"2023-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-45279","description":"Yamcs 5.8.6 allows XSS (issue 1 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a way to upload a display referencing a malicious JavaScript file to the bucket. The user can then open the uploaded display by selecting Telemetry from the menu and navigating to the display.","exploit_maturity":"No public exploit","published":"2023-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-25753","description":"\nThere exists an SSRF (Server-Side Request Forgery) vulnerability located at the /sandbox/proxyGateway endpoint. This vulnerability allows us to manipulate arbitrary requests and retrieve corresponding responses by inputting any URL into the requestUrl parameter.\n\nOf particular concern is our ability to exert control over the HTTP method, cookies, IP address, and headers. This effectively grants us the capability to dispatch complete HTTP requests to hosts of our choosing.\n\nThis issue affects Apache ShenYu: 2.5.1.\n\nUpgrade to Apache ShenYu 2.6.0 or apply patch  https://github.com/apache/shenyu/pull/4776  .\n\n","exploit_maturity":"No public exploit","published":"2023-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-22126","description":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Content accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22125","description":"Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Banking Trade Finance, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Trade Finance accessible data as well as unauthorized read access to a subset of Oracle Banking Trade Finance accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22124","description":"Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Banking Trade Finance, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Trade Finance accessible data as well as unauthorized read access to a subset of Oracle Banking Trade Finance accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22123","description":"Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Banking Trade Finance, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Trade Finance accessible data as well as unauthorized read access to a subset of Oracle Banking Trade Finance accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22122","description":"Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 14.5-14.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Trade Finance accessible data as well as unauthorized update, insert or delete access to some of Oracle Banking Trade Finance accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Trade Finance. CVSS 3.1 Base Score 5.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22121","description":"Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 14.5-14.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Trade Finance. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Trade Finance accessible data as well as unauthorized read access to a subset of Oracle Banking Trade Finance accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22119","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Universal Banking. CVSS 3.1 Base Score 5.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22118","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Universal Banking. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22117","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22109","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Dashboards). Supported versions that are affected are 6.4.0.0.0, 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22107","description":"Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: UI Components). Supported versions that are affected are ECC: 8, 9 and 10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Command Center Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Enterprise Command Center Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Command Center Framework accessible data as well as unauthorized read access to a subset of Oracle Enterprise Command Center Framework accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22106","description":"Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: API). Supported versions that are affected are ECC: 8, 9 and 10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Command Center Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Command Center Framework accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22105","description":"Vulnerability in the BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of BI Publisher accessible data as well as unauthorized read access to a subset of BI Publisher accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22093","description":"Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Requisition and Vacancy). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iRecruitment. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iRecruitment accessible data as well as unauthorized read access to a subset of Oracle iRecruitment accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22091","description":"Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and 22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22090","description":"Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Events \u0026 Notifications). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CC Common Application Objects accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22088","description":"Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: User Management). Supported versions that are affected are 7.4.0 and 7.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Order and Service Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Order and Service Management accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22083","description":"Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Web UI). Supported versions that are affected are 9.0-9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise Session Border Controller. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Enterprise Session Border Controller accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22082","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Pod Admin). Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22081","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and 22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-22080","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22076","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data as well as unauthorized read access to a subset of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22067","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf; Oracle GraalVM Enterprise Edition: 20.3.11 and 21.3.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via CORBA to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-22029","description":"Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Workbench). The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Guided Search, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Guided Search accessible data as well as unauthorized read access to a subset of Oracle Commerce Guided Search accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-45807","description":"OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana following the license change in early 2021. There is an issue with the implementation of tenant permissions in OpenSearch Dashboards where authenticated users with read-only access to a tenant can perform create, edit and delete operations on index metadata of dashboards and visualizations in that tenant, potentially rendering them unavailable. This issue does not affect index data, only metadata. Dashboards correctly enforces read-only permissions when indexing and updating documents. This issue does not provide additional read access to data users don’t already have. This issue can be mitigated by disabling the tenants functionality for the cluster. Versions 1.3.14 and 2.11.0 contain a fix for this issue.","exploit_maturity":"No public exploit","published":"2023-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-45669","description":"WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature counter value handling. A flaw was found in webauthn4j-spring-security-core. When an authneticator returns an incremented signature counter value during authentication, webauthn4j-spring-security-core does not properly persist the value, which means cloned authenticator detection does not work. An attacker who cloned valid authenticator in some way can use the cloned authenticator without being detected. This issue has been addressed in version `0.9.1.RELEASE`. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n","exploit_maturity":"No public exploit","published":"2023-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-43666","description":"Insufficient Verification of Data Authenticity vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0, \n\nGeneral user can view all user data like Admin account.\n\nUsers are advised to upgrade to Apache InLong's 1.9.0 or cherry-pick [1] to solve it.\n\n[1]  https://github.com/apache/inlong/pull/8623 \n\n","exploit_maturity":"No public exploit","published":"2023-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-45648","description":"Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.81 and from 8.5.0 through 8.5.93 did not correctly parse HTTP trailer headers. A specially \ncrafted, invalid trailer header could cause Tomcat to treat a single \nrequest as multiple requests leading to the possibility of request \nsmuggling when behind a reverse proxy.\n\nOlder, EOL versions may also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fix the issue.","exploit_maturity":"Working exploit published","published":"2023-10-10","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-42795","description":"Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could \ncause Tomcat to skip some parts of the recycling process leading to \ninformation leaking from the current request/response to the next.\nOlder, EOL versions may also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.","exploit_maturity":"No public exploit","published":"2023-10-10","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-42794","description":"Incomplete Cleanup vulnerability in Apache Tomcat.\n\nThe internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, \nin progress refactoring that exposed a potential denial of service on \nWindows if a web application opened a stream for an uploaded file but \nfailed to close the stream. The file would never be deleted from disk \ncreating the possibility of an eventual denial of service due to the \ndisk being full.\n\nOther, EOL versions may also be affected.\n\n\nUsers are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.","exploit_maturity":"No public exploit","published":"2023-10-10","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-36566","description":"Microsoft Common Data Model SDK Denial of Service Vulnerability","exploit_maturity":"No public exploit","published":"2023-10-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-43643","description":"AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to version 1.7.4, there is a potential for a mutation XSS (mXSS) vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the `preserveComments` directive must be enabled in your policy file and also allow for certain tags at the same time. As a result, certain crafty inputs can result in elements in comment tags being interpreted as executable when using AntiSamy's sanitized output. This issue has been patched in AntiSamy 1.7.4 and later. ","exploit_maturity":"No public exploit","published":"2023-10-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-36820","description":"Micronaut Security is a security solution for applications. Prior to versions 3.1.2, 3.2.4, 3.3.2, 3.4.3, 3.5.3, 3.6.6, 3.7.4, 3.8.4, 3.9.6, 3.10.2, and 3.11.1, IdTokenClaimsValidator skips `aud` claim validation if token is issued by same identity issuer/provider. Any OIDC setup using Micronaut where multiple OIDC applications exists for the same issuer but token auth are not meant to be shared. This issue has been patched in versions 3.1.2, 3.2.4, 3.3.2, 3.4.3, 3.5.3, 3.6.6, 3.7.4, 3.8.4, 3.9.6, 3.10.2, and 3.11.1.\n","exploit_maturity":"Proof of concept only","published":"2023-10-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-25822","description":"ReportPortal is an AI-powered test automation platform. Prior to version 5.10.0 of the `com.epam.reportportal:service-api` module, corresponding to ReportPortal version 23.2, the ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1 test inside when the test_item.path field is exceeded the allowable `ltree` field type indexing limit (path length\u003e=120, approximately recursive nesting of the nested steps). REINDEX INDEX path_gist_idx and path_idx aren't helped. The problem was fixed in `com.epam.reportportal:service-api` module version 5.10.0 (product release 23.2), where the maximum number of nested elements were programmatically limited. A workaround is available. After deletion of the data with long paths, and reindexing both indexes (path_gist_idx and path_idx), the database becomes stable and ReportPortal works properly.","exploit_maturity":"No public exploit","published":"2023-10-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-4066","description":"A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are shown in plaintext in the StatefulSet details yaml of AMQ Broker.","exploit_maturity":"No public exploit","published":"2023-09-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-4065","description":"A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of their permissions.","exploit_maturity":"No public exploit","published":"2023-09-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-2358","description":"\nHitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, saves passwords of the Hadoop Copy Files step in plaintext. \n\n","exploit_maturity":"No public exploit","published":"2023-09-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-0833","description":"A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attacker to access information outside of their regular permissions.","exploit_maturity":"No public exploit","published":"2023-09-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-4245","description":"A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --\u003e sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.","exploit_maturity":"No public exploit","published":"2023-09-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-43502","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers to delete Failure Causes.","exploit_maturity":"No public exploit","published":"2023-09-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-43501","description":"A missing permission check in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password.","exploit_maturity":"No public exploit","published":"2023-09-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-43499","description":"Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not escape Failure Cause names in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or update Failure Causes.","exploit_maturity":"No public exploit","published":"2023-09-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-43495","description":"Jenkins 2.423 and earlier, LTS 2.414.1 and earlier does not escape the value of the 'caption' constructor parameter of 'ExpandableDetailsNote', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control this parameter.","exploit_maturity":"No public exploit","published":"2023-09-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-43494","description":"Jenkins 2.50 through 2.423 (both inclusive), LTS 2.60.1 through 2.414.1 (both inclusive) does not exclude sensitive build variables (e.g., password parameter values) from the search in the build history widget, allowing attackers with Item/Read permission to obtain values of sensitive variables used in builds by iteratively testing different characters until the correct sequence is discovered.","exploit_maturity":"No public exploit","published":"2023-09-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-34047","description":"A batch loader function in Spring for GraphQL versions 1.1.0 - 1.1.5 and 1.2.0 - 1.2.2 may be exposed to GraphQL context with values, including security context values, from a different session. An application is vulnerable if it provides a DataLoaderOptions instance when registering batch loader functions through DefaultBatchLoaderRegistry.\n","exploit_maturity":"No public exploit","published":"2023-09-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-3916","description":"A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared computers more (especially if cookies are not cleared), due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to resolve a user session attached to a previously authenticated user; when utilizing the refresh token, they will be issued a token for the original user.","exploit_maturity":"No public exploit","published":"2023-09-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-1438","description":"A flaw was found in Keycloak. Under specific circumstances, HTML entities are not sanitized during user impersonation, resulting in a Cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2023-09-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-41900","description":"Jetty is a Java based web server and servlet engine. Versions 9.4.21 through 9.4.51, 10.0.15, and 11.0.15 are vulnerable to weak authentication. If a Jetty `OpenIdAuthenticator` uses the optional nested `LoginService`, and that `LoginService` decides to revoke an already authenticated user, then the current request will still treat the user as authenticated. The authentication is then cleared from the session and subsequent requests will not be treated as authenticated. So a request on a previously authenticated session could be allowed to bypass authentication after it had been rejected by the `LoginService`. This impacts usages of the jetty-openid which have configured a nested `LoginService` and where that `LoginService` will is capable of rejecting previously authenticated users. Versions 9.4.52, 10.0.16, and 11.0.16 have a patch for this issue.","exploit_maturity":"No public exploit","published":"2023-09-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40167","description":"Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and other servers routinely reject such requests with 400 responses. There is no known exploit scenario, but it is conceivable that request smuggling could result if jetty is used in combination with a server that does not close the connection after sending such a 400 response. Versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1 contain a patch for this issue. There is no workaround as there is no known exploit scenario.","exploit_maturity":"No public exploit","published":"2023-09-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-42503","description":"Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0.\n\nUsers are recommended to upgrade to version 1.24.0, which fixes the issue.\n\nA third party can create a malformed TAR file by manipulating file modification times headers, which when parsed with Apache Commons Compress, will cause a denial of service issue via CPU consumption.\n\nIn version 1.22 of Apache Commons Compress, support was added for file modification times with higher precision (issue # COMPRESS-612 [1]). The format for the PAX extended headers carrying this data consists of two numbers separated by a period [2], indicating seconds and subsecond precision (for example “1647221103.5998539”). The impacted fields are “atime”, “ctime”, “mtime” and “LIBARCHIVE.creationtime”. No input validation is performed prior to the parsing of header values.\n\nParsing of these numbers uses the BigDecimal [3] class from the JDK which has a publicly known algorithmic complexity issue when doing operations on large numbers, causing denial of service (see issue # JDK-6560193 [4]). A third party can manipulate file time headers in a TAR file by placing a number with a very long fraction (300,000 digits) or a number with exponent notation (such as “9e9999999”) within a file modification time header, and the parsing of files with these headers will take hours instead of seconds, leading to a denial of service via exhaustion of CPU resources. This issue is similar to CVE-2012-2098 [5].\n\n[1]: https://issues.apache.org/jira/browse/COMPRESS-612 \n[2]: https://pubs.opengroup.org/onlinepubs/9699919799/utilities/pax.html#tag_20_92_13_05 \n[3]: https://docs.oracle.com/javase/8/docs/api/java/math/BigDecimal.html \n[4]: https://bugs.openjdk.org/browse/JDK-6560193 \n[5]: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2098 \n\nOnly applications using CompressorStreamFactory class (with auto-detection of file types), TarArchiveInputStream and TarFile classes to parse TAR files are impacted. Since this code was introduced in v1.22, only that version and later versions are impacted.","exploit_maturity":"No public exploit","published":"2023-09-14","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-41947","description":"A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2023-09-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-41944","description":"Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not escape the queue name parameter passed to a form validation URL, when rendering an error message, resulting in an HTML injection vulnerability.","exploit_maturity":"No public exploit","published":"2023-09-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-41943","description":"Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to clear the SQS queue.","exploit_maturity":"No public exploit","published":"2023-09-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-41942","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers to clear the SQS queue.","exploit_maturity":"No public exploit","published":"2023-09-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-41941","description":"A missing permission check in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-09-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-41940","description":"Jenkins TAP Plugin 2.3 and earlier does not escape TAP file contents, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control TAP file contents.","exploit_maturity":"No public exploit","published":"2023-09-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-41938","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Ivy Plugin 2.5 and earlier allows attackers to delete disabled modules.","exploit_maturity":"No public exploit","published":"2023-09-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-41934","description":"Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of credentials specified in custom Maven settings in Pipeline build logs if \"Treat username as secret\" is checked.","exploit_maturity":"No public exploit","published":"2023-09-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-41932","description":"Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict 'timestamp' query parameters in multiple endpoints, allowing attackers with to delete attacker-specified directories on the Jenkins controller file system as long as they contain a file called 'history.xml'.","exploit_maturity":"No public exploit","published":"2023-09-06","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-41931","description":"Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not property sanitize or escape the timestamp value from history entries when rendering a history entry on the history view, resulting in a stored cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2023-09-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-41930","description":"Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict the 'name' query parameter when rendering a history entry, allowing attackers to have Jenkins render a manipulated configuration history that was not created by the plugin.","exploit_maturity":"No public exploit","published":"2023-09-06","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-41329","description":"WireMock is a tool for mocking HTTP services. The proxy mode of WireMock, can be protected by the network restrictions configuration, as documented in Preventing proxying to and recording from specific target addresses. These restrictions can be configured using the domain names, and in such a case the configuration is vulnerable to the DNS rebinding attacks. A similar patch was applied in WireMock 3.0.0-beta-15 for the WireMock Webhook Extensions. The root cause of the attack is a defect in the logic which allows for a race condition triggered by a DNS server whose address expires in between the initial validation and the outbound network request that might go to a domain that was supposed to be prohibited. Control over a DNS service is required to exploit this attack, so it has high execution complexity and limited impact. This issue has been addressed in version 2.35.1 of wiremock-jre8 and wiremock-jre8-standalone, version 3.0.3 of wiremock and wiremock-standalone, version 2.6.1 of the python version of wiremock, and versions 2.35.1-1 and 3.0.3-1 of the wiremock/wiremock Docker container. Users are advised to upgrade. Users unable to upgrade should either configure firewall rules to define the list of permitted destinations or to configure WireMock to use IP addresses instead of the domain names.","exploit_maturity":"No public exploit","published":"2023-09-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-41327","description":"WireMock is a tool for mocking HTTP services. WireMock can be configured to only permit proxying (and therefore recording) to certain addresses. This is achieved via a list of allowed address rules and a list of denied address rules, where the allowed list is evaluated first. \n\nUntil WireMock Webhooks Extension 3.0.0-beta-15, the filtering of target addresses from the proxy mode DID NOT work for Webhooks, so the users were potentially vulnerable regardless of the `limitProxyTargets` settings. Via the WireMock webhooks configuration, POST requests from a webhook might be forwarded to an arbitrary service reachable from WireMock’s instance. For example, If someone is running the WireMock docker Container inside a private cluster, they can trigger internal POST requests against unsecured APIs or even against secure ones by passing a token, discovered using another exploit, via authentication headers. This issue has been addressed in versions 2.35.1 and 3.0.3 of wiremock. Wiremock studio has been discontinued and will not see a fix. Users unable to upgrade should use external firewall rules to define the list of permitted destinations.","exploit_maturity":"No public exploit","published":"2023-09-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-41046","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible in XWiki to execute Velocity code without having script right by creating an XClass with a property of type \"TextArea\" and content type \"VelocityCode\" or \"VelocityWiki\". For the former, the syntax of the document needs to be set the `xwiki/1.0` (this syntax doesn't need to be installed). In both cases, when adding the property to an object, the Velocity code is executed regardless of the rights of the author of the property (edit right is still required, though). In both cases, the code is executed with the correct context author so no privileged APIs can be accessed. However, Velocity still grants access to otherwise inaccessible data and APIs that could allow further privilege escalation. At least for \"VelocityCode\", this behavior is most likely very old but only since XWiki 7.2, script right is a separate right, before that version all users were allowed to execute Velocity and thus this was expected and not a security issue. This has been patched in XWiki 14.10.10 and 15.4 RC1. Users are advised to upgrade. There are no known workarounds.","exploit_maturity":"Proof of concept only","published":"2023-09-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-41045","description":"Graylog is a free and open log management platform. Graylog makes use of only one single source port for DNS queries. Graylog binds a single socket for outgoing DNS queries and while that socket is bound to a random port number it is never changed again. This goes against recommended practice since 2008, when Dan Kaminsky discovered how easy is to carry out DNS cache poisoning attacks. In order to prevent cache poisoning with spoofed DNS responses, it is necessary to maximise the uncertainty in the choice of a source port for a DNS query. Although unlikely in many setups, an external attacker could inject forged DNS responses into a Graylog's lookup table cache. In order to prevent this, it is at least recommendable to distribute the DNS queries through a pool of distinct sockets, each of them with a random source port and renew them periodically. This issue has been addressed in versions 5.0.9 and 5.1.3. Users are advised to upgrade. There are no known workarounds for this issue.","exploit_maturity":"Proof of concept only","published":"2023-08-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-41080","description":"URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92.\nOlder, EOL versions may also be affected.\n\n\nThe vulnerability is limited to the ROOT (default) web application.","exploit_maturity":"Proof of concept only","published":"2023-08-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-24620","description":"An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack against YamlBeans YamlReader. By exploiting the Anchor feature in YAML, it is possible to generate a small YAML document that, when read, is expanded to a large size, causing CPU and memory consumption, such as a Java Out-of-Memory exception.","exploit_maturity":"Proof of concept only","published":"2023-08-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-44730","description":"Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.\n\nA malicious SVG can probe user profile / data and send it directly as parameter to a URL.","exploit_maturity":"No public exploit","published":"2023-08-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-4303","description":"Jenkins Fortify Plugin 22.1.38 and earlier does not escape the error message for a form validation method, resulting in an HTML injection vulnerability.\n\n","exploit_maturity":"No public exploit","published":"2023-08-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-4302","description":"A missing permission check in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.\n\n","exploit_maturity":"No public exploit","published":"2023-08-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-4301","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.\n\n","exploit_maturity":"No public exploit","published":"2023-08-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40037","description":"Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with connection URL validation that does not provide sufficient protection against crafted inputs. An authenticated and authorized user can bypass connection URL validation using custom input formatting. The resolution enhances connection URL validation and introduces validation for additional related properties. Upgrading to Apache NiFi 1.23.1 is the recommended mitigation.","exploit_maturity":"No public exploit","published":"2023-08-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-38905","description":"SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE, and DBMS_PIPE.RECEIVE_MESSAGE functions.","exploit_maturity":"Proof of concept only","published":"2023-08-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-40351","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Favorite View Plugin 5.v77a_37f62782d and earlier allows attackers to add or remove views from another user's favorite views tab bar.","exploit_maturity":"No public exploit","published":"2023-08-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40350","description":"Jenkins Docker Swarm Plugin 1.11 and earlier does not escape values returned from Docker before inserting them into the Docker Swarm Dashboard view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control responses from Docker.","exploit_maturity":"No public exploit","published":"2023-08-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40349","description":"Jenkins Gogs Plugin 1.0.15 and earlier improperly initializes an option to secure its webhook endpoint, allowing unauthenticated attackers to trigger builds of jobs.","exploit_maturity":"No public exploit","published":"2023-08-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40348","description":"The webhook endpoint in Jenkins Gogs Plugin 1.0.15 and earlier provides unauthenticated attackers information about the existence of jobs in its output.","exploit_maturity":"No public exploit","published":"2023-08-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40347","description":"Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.","exploit_maturity":"No public exploit","published":"2023-08-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40346","description":"Jenkins Shortcut Job Plugin 0.4 and earlier does not escape the shortcut redirection URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure shortcut jobs.","exploit_maturity":"No public exploit","published":"2023-08-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40345","description":"Jenkins Delphix Plugin 3.0.2 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Overall/Read permission to access and capture credentials they are not entitled to.","exploit_maturity":"No public exploit","published":"2023-08-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40344","description":"A missing permission check in Jenkins Delphix Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-08-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40343","description":"Jenkins Tuleap Authentication Plugin 1.1.20 and earlier uses a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.","exploit_maturity":"No public exploit","published":"2023-08-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40342","description":"Jenkins Flaky Test Handler Plugin 1.2.2 and earlier does not escape JUnit test contents when showing them on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control JUnit report file contents.","exploit_maturity":"No public exploit","published":"2023-08-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40338","description":"Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier displays an error message that includes an absolute path of a log file when attempting to access the Scan Organization Folder Log if no logs are available, exposing information about the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-08-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40337","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy a view inside a folder.","exploit_maturity":"No public exploit","published":"2023-08-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40312","description":"Multiple reflected XSS were found on different JSP files with unsanitized parameters in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms that an attacker can modify to craft a malicious XSS payload. The solution is to upgrade to Meridian 2023.1.6, 2022.1.19, 2021.1.30, 2020.1.38 or Horizon 32.0.2 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. OpenNMS thanks Jordi Miralles Comins for reporting this issue.\n","exploit_maturity":"No public exploit","published":"2023-08-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-40311","description":"Multiple stored XSS were found on different JSP files with unsanitized parameters in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms that allow an attacker to store on database and then load on JSPs or Angular templates. The solution is to upgrade to Meridian 2023.1.6, 2022.1.19, 2021.1.30, 2020.1.38 or Horizon 32.0.2 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. OpenNMS thanks Jordi Miralles Comins for reporting this issue.\n","exploit_maturity":"No public exploit","published":"2023-08-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-0871","description":"XXE injection in /rtc/post/ endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to XML external entity (XXE) injection, which can be used for instance to force Horizon to make arbitrary HTTP requests to internal and external services. The solution is to upgrade to Meridian 2023.1.6, 2022.1.19, 2021.1.30, 2020.1.38 or Horizon 32.0.2 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. OpenNMS thanks Erik Wynter and Moshe Apelbaum for reporting this issue.\n","exploit_maturity":"No public exploit","published":"2023-08-11","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-0264","description":"A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and generate new session tokens. This issue could impact confidentiality, integrity, and availability.","exploit_maturity":"Proof of concept only","published":"2023-08-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41401","description":"OpenRefine \u003c= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure.","exploit_maturity":"Proof of concept only","published":"2023-08-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-3426","description":"The organization selector in Liferay Portal 7.4.3.81 through 7.4.3.85, and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations.","exploit_maturity":"No public exploit","published":"2023-08-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-3990","description":"A vulnerability classified as problematic has been found in Mingsoft MCMS up to 5.3.1. This affects an unknown part of the file search.do of the component HTTP POST Request Handler. The manipulation of the argument style leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-235611.","exploit_maturity":"Working exploit published","published":"2023-07-28","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-3946","description":"\nA reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 SP1 Update 1allows a remote unauthenticated attacker to potentially obtain access to an ePO administrator's session by convincing the authenticated ePO administrator to click on a carefully crafted link. This would lead to limited access to sensitive information and limited ability to alter some information in ePO.\n\n\n","exploit_maturity":"No public exploit","published":"2023-07-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-39156","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Bazaar Plugin 1.22 and earlier allows attackers to delete previously created Bazaar SCM tags.","exploit_maturity":"No public exploit","published":"2023-07-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-39155","description":"Jenkins Chef Identity Plugin 2.0.3 and earlier does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it.","exploit_maturity":"No public exploit","published":"2023-07-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-39154","description":"Incorrect permission checks in Jenkins Qualys Web App Scanning Connector Plugin 2.0.10 and earlier allow attackers with global Item/Configure permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-07-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-39153","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Authentication Plugin 1.17.1 and earlier allows attackers to trick users into logging in to the attacker's account.","exploit_maturity":"No public exploit","published":"2023-07-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-39152","description":"Always-incorrect control flow implementation in Jenkins Gradle Plugin 2.8 may result in credentials not being masked (i.e., replaced with asterisks) in the build log in some circumstances.","exploit_maturity":"No public exploit","published":"2023-07-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-39151","description":"Jenkins 2.415 and earlier, LTS 2.401.2 and earlier does not sanitize or properly encode URLs in build logs when transforming them into hyperlinks, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control build log contents.","exploit_maturity":"No public exploit","published":"2023-07-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-3414","description":"A cross-site request forgery vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive information. To address this issue, apply the 1.38.1 version of the Jenkins plug-in for ServiceNow DevOps on your Jenkins server. No changes are required on your instances of the Now Platform. \n","exploit_maturity":"No public exploit","published":"2023-07-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-38435","description":"An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting (XSS) attack.\n\nUpgrade to Apache Felix Healthcheck Webconsole Plugin 2.1.0 or higher.","exploit_maturity":"No public exploit","published":"2023-07-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-34189","description":"Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. The attacker could use general users to delete and update the process, which only the admin can operate occurrences. \n\nUsers are advised to upgrade to Apache InLong's 1.8.0 or cherry-pick https://github.com/apache/inlong/pull/8109  to solve it.","exploit_maturity":"No public exploit","published":"2023-07-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-3815","description":"A vulnerability, which was classified as problematic, has been found in y_project RuoYi up to 4.7.7. Affected by this issue is the function uploadFilesPath of the component File Upload. The manipulation of the argument originalFilenames leads to cross site scripting. The attack may be launched remotely. VDB-235118 is the identifier assigned to this vulnerability.","exploit_maturity":"Proof of concept only","published":"2023-07-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37602","description":"An arbitrary file upload vulnerability in the component /workplace#!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via uploading a crafted PNG file.","exploit_maturity":"Proof of concept only","published":"2023-07-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-3782","description":"DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response\n\n","exploit_maturity":"Proof of concept only","published":"2023-07-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32263","description":"\nA potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability could be exploited to retrieve a login certificate if an authenticated user is duped into using an attacker-controlled Dimensions CM server. This vulnerability only applies when the Jenkins plugin is configured to use login certificate credentials.\n\n\n https://www.jenkins.io/security/advisory/2023-06-14/ \n\n","exploit_maturity":"No public exploit","published":"2023-07-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32262","description":"\nA potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Item/Configure permission to access and capture credentials they are not entitled to.\nSee the following Jenkins security advisory for details: * https://www.jenkins.io/security/advisory/2023-06-14/ https://www.jenkins.io/security/advisory/2023-06-14/ \n\n\n\n\n","exploit_maturity":"No public exploit","published":"2023-07-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32261","description":"\nA potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.\nSee the following Jenkins security advisory for details: * https://www.jenkins.io/security/advisory/2023-06-14/ https://www.jenkins.io/security/advisory/2023-06-14/ \n\n\n\n\n","exploit_maturity":"No public exploit","published":"2023-07-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-22061","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Visual Analyzer). The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22055","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.7.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22050","description":"Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are Prior to 9.2.7.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Orchestrator. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Orchestrator accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Orchestrator accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22043","description":"Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u371. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22042","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.3-12.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data as well as unauthorized read access to a subset of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22040","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22039","description":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: WebClient). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22037","description":"Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: MS Excel Specific). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Web Applications Desktop Integrator, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Web Applications Desktop Integrator accessible data as well as unauthorized read access to a subset of Oracle Web Applications Desktop Integrator accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22035","description":"Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Scripting, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Scripting accessible data as well as unauthorized read access to a subset of Oracle Scripting accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22031","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows high privileged attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22027","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). The supported version that is affected is 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22022","description":"Vulnerability in the Oracle Health Sciences Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: Blinding Functionality). Supported versions that are affected are 3.1.0.2, 3.1.1.3 and 3.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Health Sciences Sciences Data Management Workbench. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Health Sciences Sciences Data Management Workbench accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22021","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22020","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22013","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22012","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). The supported version that is affected is 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22011","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22009","description":"Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Workforce Management). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Self-Service Human Resources. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Self-Service Human Resources accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22004","description":"Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: Reports Configuration). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Technology accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21994","description":"Vulnerability in the Oracle Mobile Security Suite product of Oracle Fusion Middleware (component: Android Mobile Authenticator App). Supported versions that are affected are Prior to 11.1.2.3.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Mobile Security Suite executes to compromise Oracle Mobile Security Suite. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Mobile Security Suite accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21983","description":"Vulnerability in the Application Express Administration product of Oracle Application Express (component: None). Supported versions that are affected are Application Express Administration: 18.2-22.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Application Express Administration. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Application Express Administration accessible data as well as unauthorized read access to a subset of Application Express Administration accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Application Express Administration. CVSS 3.1 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21961","description":"Vulnerability in the Oracle Hyperion Essbase Administration Services product of Oracle Essbase (component: EAS Administration and EAS Console). The supported version that is affected is 21.4.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Essbase Administration Services executes to compromise Oracle Hyperion Essbase Administration Services. While the vulnerability is in Oracle Hyperion Essbase Administration Services, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Essbase Administration Services accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-34036","description":"\nReactive web applications that use Spring HATEOAS to produce hypermedia-based responses might be exposed to malicious forwarded headers if they are not behind a trusted proxy that ensures correctness of such headers, or if they don't have anything else in place to handle (and possibly discard) forwarded headers either in WebFlux or at the level of the underlying HTTP server.\n\nFor the application to be affected, it needs to satisfy the following requirements:\n\n * It needs to use the reactive web stack (Spring WebFlux) and Spring HATEOAS to create links in hypermedia-based responses.\n * The application infrastructure does not guard against clients submitting (X-)Forwarded… headers.\n\n\n\n\n\n","exploit_maturity":"No public exploit","published":"2023-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-37963","description":"A missing permission check in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL and to check for the existence of directories, `.csv`, and `.ycsb` files on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37960","description":"Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems.","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-37959","description":"A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37956","description":"A missing permission check in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37955","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37954","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Rebuilder Plugin 320.v5a_0933a_e7d61 and earlier allows attackers to rebuild a previous build.","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37953","description":"A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37952","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins mabl Plugin 0.0.46 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37951","description":"Jenkins mabl Plugin 0.0.46 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37950","description":"A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37947","description":"Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37945","description":"A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with Overall/Read permission to download a string representation of the current security realm.","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37944","description":"A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37943","description":"Jenkins Active Directory Plugin 2.30 and earlier ignores the \"Require TLS\" and \"StartTls\" options and always performs the connection test to Active directory unencrypted, allowing attackers able to capture network traffic between the Jenkins controller and Active Directory servers to obtain Active Directory credentials.","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-37942","description":"Jenkins External Monitor Job Type Plugin 206.v9a_94ff0b_4a_10 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-31007","description":"Improper Authentication vulnerability in Apache Software Foundation Apache Pulsar Broker allows a client to stay connected to a broker after authentication data expires if the client connected through the Pulsar Proxy when the broker is configured with authenticateOriginalAuthData=false or if a client connects directly to a broker with a specially crafted connect command when the broker is configured with authenticateOriginalAuthData=false.\n\nThis issue affects Apache Pulsar: through 2.9.4, from 2.10.0 through 2.10.3, 2.11.0.\n\n2.9 Pulsar Broker users should upgrade to at least 2.9.5.\n2.10 Pulsar Broker users should upgrade to at least 2.10.4.\n2.11 Pulsar Broker users should upgrade to at least 2.11.1.\n3.0 Pulsar Broker users are unaffected.\nAny users running the Pulsar Broker for 2.8.* and earlier should upgrade to one of the above patched versions.\n","exploit_maturity":"No public exploit","published":"2023-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-35887","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.\n\nIn SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover \"exists/does not exist\" information about items outside the rooted tree via paths including parent navigation (\"..\") beyond the root, or involving symlinks.\n\nThis issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10\n","exploit_maturity":"No public exploit","published":"2023-07-10","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-35890","description":"IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security, caused by the improper encoding in a local configuration file. IBM X-Force ID: 258637.","exploit_maturity":"No public exploit","published":"2023-07-07","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-33008","description":"Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache Johnzon.\n\n\nA malicious attacker can craft up some JSON input that uses large numbers (numbers such as 1e20000000) that Apache Johnzon will deserialize into BigDecimal and maybe use numbers too large which may result in a slow conversion (Denial of service risk). Apache Johnzon 1.2.21 mitigates this by setting a scale limit of 1000 (by default) to the BigDecimal. \n\n\nThis issue affects Apache Johnzon: through 1.2.20.\n\n","exploit_maturity":"No public exploit","published":"2023-07-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-34150","description":"** UNSUPPORTED WHEN ASSIGNED ** Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage.","exploit_maturity":"No public exploit","published":"2023-07-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33201","description":"Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability. The vulnerability only affects applications that use an LDAP CertStore from Bouncy Castle to validate X.509 certificates. During the certificate validation process, Bouncy Castle inserts the certificate's Subject Name into an LDAP search filter without any escaping, which leads to an LDAP injection vulnerability.","exploit_maturity":"No public exploit","published":"2023-07-05","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-3431","description":"Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9.","exploit_maturity":"No public exploit","published":"2023-06-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-35925","description":"FastAsyncWorldEdit (FAWE) is designed for efficient world editing. This vulnerability enables the attacker to select a region with the `Infinity` keyword (case-sensitive!) and executes any operation. This has a possibility of bringing the performing server down. This issue has been fixed in version 2.6.3.","exploit_maturity":"Proof of concept only","published":"2023-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-34466","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 5.0-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, tags from pages not viewable to the current user are leaked by the tags API. This information can also be exploited to infer the document reference of non-viewable pages. This vulnerability has been patched in XWiki 14.4.8, 14.10.4, and 15.0-rc-1.\n\n","exploit_maturity":"Proof of concept only","published":"2023-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-34462","description":"Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026 clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record. Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is possible to craft a packet that makes the `SslClientHelloHandler`. This vulnerability has been fixed in version 4.1.94.Final.","exploit_maturity":"No public exploit","published":"2023-06-22","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-25500","description":"Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1.0.alpha1 to 24.1.0.rc2, resulting in potential information disclosure of class and method names in RPC responses by sending modified requests.","exploit_maturity":"No public exploit","published":"2023-06-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-25499","description":"When adding non-visible components to the UI in server side, content is sent to the browser in Vaadin 10.0.0 through 10.0.22, 11.0.0 through 14.10.0, 15.0.0 through 22.0.28, 23.0.0 through 23.3.12, 24.0.0 through 24.0.5 and 24.1.0.alpha1 to 24.1.0.beta1, resulting in potential information disclosure.\n\n","exploit_maturity":"No public exploit","published":"2023-06-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33725","description":"Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was discovered to contain a cross-site scripting (XSS) vulnerability via a customer signup with a crafted email address. This is fixed in 6.2.6.1-GA.","exploit_maturity":"No public exploit","published":"2023-06-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-21485","description":"Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code via the path parameter in the browse board component.","exploit_maturity":"Proof of concept only","published":"2023-06-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-3315","description":"Missing permission checks in Jenkins Team Concert Plugin 2.4.1 and earlier allow attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-06-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-34660","description":"jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.","exploit_maturity":"No public exploit","published":"2023-06-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-35029","description":"Open redirect vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to redirect users to arbitrary external URLs via the `_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL` parameter.","exploit_maturity":"No public exploit","published":"2023-06-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-3193","description":"Cross-site scripting (XSS) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.73, and Liferay DXP 7.4 update 70 through 73 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL` parameter.","exploit_maturity":"No public exploit","published":"2023-06-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-35149","description":"A missing permission check in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-35148","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-35147","description":"Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an HTTP endpoint, allowing attackers with Item/Read permission to obtain the contents of arbitrary files on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-35146","description":"Jenkins Template Workflows Plugin 41.v32d86a_313b_4a and earlier does not escape names of jobs used as buildings blocks for Template Workflow Job, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create jobs.","exploit_maturity":"No public exploit","published":"2023-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-35145","description":"Jenkins Sonargraph Integration Plugin 5.0.1 and earlier does not escape the file path and the project name for the Log file field form validation, resulting in a stored cross-site scripting vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2023-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-35144","description":"Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape project and build display names on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2023-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-35143","description":"Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape the versions of build artifacts on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control maven project versions in `pom.xml`.","exploit_maturity":"No public exploit","published":"2023-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-35116","description":"jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure and trying to serialize it cannot be achieved by an external attacker.","exploit_maturity":"No public exploit","published":"2023-06-14","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-34149","description":"Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2.\n\nUpgrade to Struts 2.5.31 or 6.1.2.1 or greater.","exploit_maturity":"No public exploit","published":"2023-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-34212","description":"The JndiJmsConnectionFactoryProvider Controller Service, along with the ConsumeJMS and PublishJMS Processors, in Apache NiFi 1.8.0 through 1.21.0 allow an authenticated and authorized user to configure URL and library properties that enable deserialization of untrusted data from a remote location.\n\nThe resolution validates the JNDI URL and restricts locations to a set of allowed schemes.\n\nYou are recommended to upgrade to version 1.22.0 or later which fixes this issue.","exploit_maturity":"No public exploit","published":"2023-06-12","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-32732","description":"gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for `-bin` suffixed headers will result in a disconnection by the gRPC server, but is typically allowed by HTTP2 proxies. We recommend upgrading beyond the commit in  https://github.com/grpc/grpc/pull/32309 https://www.google.com/url","exploit_maturity":"No public exploit","published":"2023-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-2455","description":"Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and a given query is planned under one role and then executed under other roles. This scenario can happen under security definer functions or when a common user and query is planned initially and then re-used across multiple SET ROLEs. Applying an incorrect policy may permit a user to complete otherwise-forbidden reads and modifications. This affects only databases that have used CREATE POLICY to define a row security policy.","exploit_maturity":"No public exploit","published":"2023-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33546","description":"Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack overflow. NOTE: this is disputed by multiple parties because Janino is not intended for use with untrusted input.","exploit_maturity":"Proof of concept only","published":"2023-06-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33544","description":"hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite.","exploit_maturity":"Proof of concept only","published":"2023-06-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-33962","description":"JStachio is a type-safe Java Mustache templating engine. Prior to version 1.0.1, JStachio fails to escape single quotes `'` in HTML, allowing an attacker to inject malicious code. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of other users visiting pages that use this template engine. This can lead to various consequences, including session hijacking, defacement of web pages, theft of sensitive information, or even the propagation of malware.\n\nVersion 1.0.1 contains a patch for this issue. To mitigate this vulnerability, the template engine should properly escape special characters, including single quotes. Common practice is to escape `'` as `\u0026#39`. As a workaround, users can avoid this issue by using only double quotes `\"` for HTML attributes.","exploit_maturity":"Proof of concept only","published":"2023-05-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-1664","description":"A flaw was found in Keycloak. This flaw depends on a non-default configuration \"Revalidate Client Certificate\" to be enabled and the reverse proxy is not validating the certificate before Keycloak. Using this method an attacker may choose the certificate which will be validated by the server. If this happens and the KC_SPI_TRUSTSTORE_FILE_FILE variable is missing/misconfigured, any trustfile may be accepted with the logging information of \"Cannot validate client certificate trust: Truststore not available\". This may not impact availability as the attacker would have no access to the server, but consumer applications Integrity or Confidentiality may be impacted considering a possible access to them. Considering the environment is correctly set to use \"Revalidate Client Certificate\" this flaw is avoidable.","exploit_maturity":"No public exploit","published":"2023-05-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-46907","description":"A carefully crafted request on several JSPWiki plugins could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.0 or later.","exploit_maturity":"No public exploit","published":"2023-05-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33947","description":"The Object module in Liferay Portal 7.4.3.4 through 7.4.3.60, and Liferay DXP 7.4 before update 61 does not segment object definition by virtual instance in search which allows remote authenticated users in one virtual instance to view object definition from a second virtual instance by searching for the object definition.","exploit_maturity":"No public exploit","published":"2023-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33946","description":"The Object module in Liferay Portal 7.4.3.4 through 7.4.3.48, and Liferay DXP 7.4 before update 49 does properly isolate objects in difference virtual instances, which allows remote authenticated users in one virtual instance to view objects in a different virtual instance via OAuth 2 scope administration page.","exploit_maturity":"No public exploit","published":"2023-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33944","description":"Cross-site scripting (XSS) vulnerability in Layout module in Liferay Portal 7.3.4 through 7.4.3.68, and Liferay DXP 7.3 before update 24, and 7.4 before update 69 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a container type layout fragment's `URL` text field.","exploit_maturity":"No public exploit","published":"2023-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33943","description":"Cross-site scripting (XSS) vulnerability in the Account module in Liferay Portal 7.4.3.21 through 7.4.3.62, and Liferay DXP 7.4 update 21 through 62 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a user's (1) First Name, (2) Middle Name, (3) Last Name, or (4) Job Title text field.","exploit_maturity":"No public exploit","published":"2023-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33942","description":"Cross-site scripting (XSS) vulnerability in the Web Content Display widget's article selector in Liferay Liferay Portal 7.4.3.50, and Liferay DXP 7.4 update 50 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a web content article's `Title` field.","exploit_maturity":"No public exploit","published":"2023-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33941","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Plugin for OAuth 2.0 module's OAuth2ProviderApplicationRedirect class in Liferay Portal 7.4.3.41 through 7.4.3.52, and Liferay DXP 7.4 update 41 through 52 allow remote attackers to inject arbitrary web script or HTML via the (1) code, or (2) error parameter.","exploit_maturity":"No public exploit","published":"2023-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33940","description":"Cross-site scripting (XSS) vulnerability in IFrame type Remote Apps in Liferay Portal 7.4.0 through 7.4.3.30, and Liferay DXP 7.4 before update 31 allows remote attackers to inject arbitrary web script or HTML via the Remote App's IFrame URL.","exploit_maturity":"No public exploit","published":"2023-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33939","description":"Cross-site scripting (XSS) vulnerability in the Modified Facet widget in Liferay Portal 7.1.0 through 7.4.3.12, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 18, 7.3 before update 4, and 7.4 before update 9 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a facet label.","exploit_maturity":"No public exploit","published":"2023-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33938","description":"Cross-site scripting (XSS) vulnerability in the App Builder module's custom object details page in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before update 14 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an App Builder custom object's `Name` field.","exploit_maturity":"No public exploit","published":"2023-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33937","description":"Stored cross-site scripting (XSS) vulnerability in Form widget configuration in Liferay Portal 7.1.0 through 7.3.0, and Liferay DXP 7.1 before fix pack 18, and 7.2 before fix pack 5 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a form's `name` field.","exploit_maturity":"No public exploit","published":"2023-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-1158","description":"\nHitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not part of the authorization list. \n\n","exploit_maturity":"No public exploit","published":"2023-05-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-33264","description":"In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.","exploit_maturity":"No public exploit","published":"2023-05-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-31101","description":"Insecure Default Initialization of Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.6.0. Users registered in InLong who joined later can see deleted users' data. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7836 https://github.com/apache/inlong/pull/7836 to solve it.\n\n\n","exploit_maturity":"No public exploit","published":"2023-05-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33007","description":"Jenkins LoadComplete support Plugin 1.0 and earlier does not escape the LoadComplete test name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33006","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins WSO2 Oauth Plugin 1.0 and earlier allows attackers to trick users into logging in to the attacker's account.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33005","description":"Jenkins WSO2 Oauth Plugin 1.0 and earlier does not invalidate the previous session on login.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33004","description":"A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33003","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-33002","description":"Jenkins TestComplete support Plugin 2.8.1 and earlier does not escape the TestComplete project name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32999","description":"A missing permission check in Jenkins AppSpider Plugin 1.0.15 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL and send an HTTP POST request with a JSON payload consisting of attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32996","description":"A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request with JSON body containing attacker-specified content, to miniOrange's API for sending emails.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32993","description":"Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier does not perform hostname validation when connecting to miniOrange or the configured IdP to retrieve SAML metadata, which could be abused using a man-in-the-middle attack to intercept these connections.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32990","description":"A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through another method.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32988","description":"A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32985","description":"Jenkins Sidebar Link Plugin 2.2.1 and earlier does not restrict the path of files in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.","exploit_maturity":"Forecast only","published":"2023-05-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-32984","description":"Jenkins TestNG Results Plugin 730.v4c5283037693 and earlier does not escape several values that are parsed from TestNG report files and displayed on the plugin's test information pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a crafted TestNG report file.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32983","description":"Jenkins Ansible Plugin 204.v8191fd551eb_f and earlier does not mask extra variables displayed on the configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32982","description":"Jenkins Ansible Plugin 204.v8191fd551eb_f and earlier stores extra variables unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32980","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Email Extension Plugin allows attackers to make another user stop watching an attacker-specified job.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32979","description":"Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files in the email-templates/ directory in the Jenkins home directory on the controller file system.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32978","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins LDAP Plugin allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32977","description":"Jenkins Pipeline: Job Plugin does not escape the display name of the build that caused an earlier build to be aborted, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set build display names immediately.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-31544","description":"A stored cross-site scripting (XSS) vulnerability in alkacon-OpenCMS v11.0.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field under the Upload Image module.","exploit_maturity":"Proof of concept only","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-2633","description":"Jenkins Code Dx Plugin 3.1.0 and earlier does not mask Code Dx server API keys displayed on the configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-2632","description":"Jenkins Code Dx Plugin 3.1.0 and earlier stores Code Dx server API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-2631","description":"A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-2196","description":"A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Item/Read permission to check for the existence of an attacker-specified file path on an agent file system.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-2195","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2023-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-32068","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 14.10.4 it's possible to exploit well known parameters in XWiki URLs to perform redirection to untrusted site. This vulnerability was partially fixed in the past for XWiki 12.10.7 and 13.3RC1 but there is still the possibility to force specific URLs to skip some checks, e.g. using URLs like `http:example.com` in the parameter would allow the redirect. The issue has now been patched against all patterns that are known for performing redirects. This issue has been patched in XWiki 14.10.4 and 15.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.","exploit_maturity":"Working exploit published","published":"2023-05-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-32081","description":"Vert.x STOMP is a vert.x implementation of the STOMP specification that provides a STOMP server and client. From versions 3.1.0 until 3.9.16 and 4.0.0 until 4.4.2, a Vert.x STOMP server processes client STOMP frames without checking that the client send an initial CONNECT frame replied with a successful CONNECTED frame. The client can subscribe to a destination or publish message without prior authentication. Any Vert.x STOMP server configured with an authentication handler is impacted. The issue is patched in Vert.x 3.9.16 and 4.4.2. There are no trivial workarounds.","exploit_maturity":"No public exploit","published":"2023-05-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-28936","description":"Attacker can access arbitrary recording/room\n\nVendor: The Apache Software Foundation\n\nVersions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0\n","exploit_maturity":"No public exploit","published":"2023-05-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-31141","description":"OpenSearch is open-source software suite for search, analytics, and observability applications. Prior to versions 1.3.10 and 2.7.0, there is an issue with the implementation of fine-grained access control rules (document-level security, field-level security and field masking) where they are not correctly applied to the queries during extremely rare race conditions potentially leading to incorrect access authorization. For this issue to be triggered, two concurrent requests need to land on the same instance exactly when query cache eviction happens, once every four hours. OpenSearch 1.3.10 and 2.7.0 contain a fix for this issue.","exploit_maturity":"No public exploit","published":"2023-05-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30093","description":"A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard.","exploit_maturity":"Proof of concept only","published":"2023-05-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-39161","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and IBM WebSphere Application Server Liberty, when configured to communicate with the Web Server Plug-ins for IBM WebSphere Application Server, could allow an authenticated user to conduct spoofing attacks. A man-in-the-middle attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 235069.","exploit_maturity":"No public exploit","published":"2023-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-45801","description":"Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability.\nLDAP Injection is an attack used to exploit web based applications\nthat construct LDAP statements based on user input. When an\napplication fails to properly sanitize user input, it's possible to\nmodify LDAP statements through techniques similar to SQL Injection.\nLDAP injection attacks could result in the granting of permissions to\nunauthorized queries, and content modification inside the LDAP tree.\nThis risk may only occur when the user logs in with ldap, and the user\nname and password login will not be affected, Users of the affected\nversions should upgrade to Apache StreamPark 2.0.0 or later.\n\n\n\n\n\n\n","exploit_maturity":"No public exploit","published":"2023-05-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-29471","description":"Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials (if plain cleartext login is configured). This occurs in akka.kafka.internal.KafkaConsumerActor.","exploit_maturity":"No public exploit","published":"2023-04-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24966","description":"IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 246904.","exploit_maturity":"No public exploit","published":"2023-04-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-22665","description":"There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts. It allows a remote user to execute arbitrary javascript via a SPARQL query.","exploit_maturity":"No public exploit","published":"2023-04-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-25601","description":"On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the python-gateway function by changing the value `python-gateway.enabled=false` in configuration file `application.yaml`. If you are using the python gateway, please upgrade to version 3.1.2 or above.","exploit_maturity":"No public exploit","published":"2023-04-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-29923","description":"PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface.","exploit_maturity":"Working exploit published","published":"2023-04-19","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-29922","description":"PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.","exploit_maturity":"Working exploit published","published":"2023-04-19","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-29921","description":"PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface.","exploit_maturity":"Proof of concept only","published":"2023-04-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-29520","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to break many translations coming from wiki pages by creating a corrupted document containing a translation object. This will lead to a broken page. The vulnerability has been patched in XWiki 15.0-rc-1, 14.10.1, 14.4.8, and 13.10.11. Users are advised to upgrade. There are no workarounds other than fixing any way to create a document that fail to load.","exploit_maturity":"Proof of concept only","published":"2023-04-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-29513","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. If guest has view right on any document. It's possible to create a new user using the `distribution/firstadminuser.wiki` in the wrong context. This vulnerability has been patched in XWiki 15.0-rc-1 and 14.10.1. There is no known workaround other than upgrading.","exploit_maturity":"Proof of concept only","published":"2023-04-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-20862","description":"In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to 6.0.3, the logout support does not properly clean the security context if using serialized versions. Additionally, it is not possible to explicitly save an empty security context to the HttpSessionSecurityContextRepository. This vulnerability can keep users authenticated even after they performed logout. Users of affected versions should apply the following mitigation. 5.7.x users should upgrade to 5.7.8. 5.8.x users should upgrade to 5.8.3. 6.0.x users should upgrade to 6.0.3.","exploit_maturity":"No public exploit","published":"2023-04-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-26049","description":"Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `\"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE=\"b; JSESSIONID=1337; c=d\"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue.","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-26048","description":"Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` when the client sends a multipart request with a part that has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0` which should stream the whole part content to disk. An attacker client may send a large multipart request and cause the server to throw `OutOfMemoryError`. However, the server may be able to recover after the `OutOfMemoryError` and continue its service -- although it may take some time. This issue has been patched in versions 9.4.51, 10.0.14, and 11.0.14. Users are advised to upgrade. Users unable to upgrade may set the multipart parameter `maxRequestSize` which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-21997","description":"Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle User Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle User Management accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21993","description":"Vulnerability in the Oracle Clinical Remote Data Capture product of Oracle Health Sciences Applications (component: Forms). The supported version that is affected is 5.4.0.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Clinical Remote Data Capture. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Clinical Remote Data Capture accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21992","description":"Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Administer Workforce). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Human Resources accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21986","description":"Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Native Image). Supported versions that are affected are Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle GraalVM Enterprise Edition executes to compromise Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 5.7 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21981","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.58, 8.59 and 8.60. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21978","description":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: GUI). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Object Library, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data as well as unauthorized read access to a subset of Oracle Application Object Library accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Application Object Library. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21973","description":"Vulnerability in the Oracle iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iProcurement. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iProcurement, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iProcurement accessible data as well as unauthorized read access to a subset of Oracle iProcurement accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21971","description":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors as well as unauthorized update, insert or delete access to some of MySQL Connectors accessible data and unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21970","description":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Security). The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21969","description":"Vulnerability in Oracle SQL Developer (component: Installation). Supported versions that are affected are Prior to 23.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle SQL Developer executes to compromise Oracle SQL Developer. Successful attacks of this vulnerability can result in takeover of Oracle SQL Developer. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21967","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21965","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21960","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21959","description":"Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iReceivables accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21956","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21954","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21952","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21944","description":"Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21943","description":"Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21942","description":"Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21941","description":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 6.4.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle BI Publisher accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21939","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"Proof of concept only","published":"2023-04-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-21936","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21927","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are Prior to 9.2.7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21926","description":"Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Health Sciences InForm executes to compromise Oracle Health Sciences InForm. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Health Sciences InForm accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21925","description":"Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Health Sciences InForm. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Health Sciences InForm. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21924","description":"Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Health Sciences InForm. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Health Sciences InForm, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Health Sciences InForm accessible data as well as unauthorized read access to a subset of Oracle Health Sciences InForm accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Health Sciences InForm. CVSS 3.1 Base Score 5.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21922","description":"Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Health Sciences InForm. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Health Sciences InForm accessible data as well as unauthorized access to critical data or complete access to all Oracle Health Sciences InForm accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21921","description":"Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Health Sciences InForm. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Health Sciences InForm accessible data as well as unauthorized read access to a subset of Oracle Health Sciences InForm accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21916","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server). Supported versions that are affected are 8.58, 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21915","description":"Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Book/Internal Transfer). Supported versions that are affected are 14.5, 14.6 and 14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Payments accessible data as well as unauthorized read access to a subset of Oracle Banking Payments accessible data. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21910","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Supported versions that are affected are 6.4.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21909","description":"Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: UI Framework). Supported versions that are affected are 23.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21908","description":"Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain). Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Virtual Account Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Banking Virtual Account Management accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Banking Virtual Account Management. CVSS 3.1 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:H).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21907","description":"Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain). Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Virtual Account Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Banking Virtual Account Management accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Banking Virtual Account Management. CVSS 3.1 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:H).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21906","description":"Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: SMS Module). Supported versions that are affected are 14.5, 14.6 and 14.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Virtual Account Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Banking Virtual Account Management accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21905","description":"Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: Routing Hub). Supported versions that are affected are 14.5, 14.6 and 14.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Virtual Account Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Banking Virtual Account Management accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21904","description":"Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain). Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Virtual Account Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Banking Virtual Account Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Virtual Account Management. CVSS 3.1 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21903","description":"Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Internal Tfr Domain). Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Virtual Account Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Banking Virtual Account Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Virtual Account Management. CVSS 3.1 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21902","description":"Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications (component: Application). The supported version that is affected is 8.0.8.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Behavior Detection Platform. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Financial Services Behavior Detection Platform accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-29506","description":"XWiki Commons are technical libraries common to several other top level XWiki projects. It was possible to inject some code using the URL of authenticated endpoints. This problem has been patched on XWiki 13.10.11, 14.4.7 and 14.10.","exploit_maturity":"Working exploit published","published":"2023-04-16","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-29204","description":"XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the existing security measures put in place to avoid open redirect by using a redirect such as `//mydomain.com` (i.e. omitting the `http:`). It was also possible to bypass it when using URL such as `http:/mydomain.com`. The problem has been patched on XWiki 13.10.10, 14.4.4 and 14.8RC1.\n","exploit_maturity":"Working exploit published","published":"2023-04-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-29203","description":"XWiki Commons are technical libraries common to several other top level XWiki projects. It's possible to list some users who are normally not viewable from subwiki by requesting users on a subwiki which allows only global users with `uorgsuggest.vm`. This issue only concerns hidden users from main wiki. Note that the disclosed information are the username and the first and last name of users, no other information is leaked. The problem has been patched on XWiki 13.10.8, 14.4.3 and 14.7RC1. \n","exploit_maturity":"Proof of concept only","published":"2023-04-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-20866","description":"In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes sensitive information to those who have access to the application logs and can be used for session hijacking. Specifically, an application is vulnerable if it is using HeaderHttpSessionIdResolver.","exploit_maturity":"No public exploit","published":"2023-04-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-20863","description":"In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.","exploit_maturity":"No public exploit","published":"2023-04-13","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-30532","description":"A missing permission check in Jenkins TurboScript Plugin 1.3 and earlier allows attackers with Item/Read permission to trigger builds of jobs corresponding to the attacker-specified repository.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30531","description":"Jenkins Consul KV Builder Plugin 2.0.13 and earlier does not mask the HashiCorp Consul ACL Token on the global configuration form, increasing the potential for attackers to observe and capture it.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30530","description":"Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30529","description":"Jenkins Lucene-Search Plugin 387.v938a_ecb_f7fe9 and earlier does not require POST requests for an HTTP endpoint, allowing attackers to reindex the database.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30528","description":"Jenkins WSO2 Oauth Plugin 1.0 and earlier does not mask the WSO2 Oauth client secret on the global configuration form, increasing the potential for attackers to observe and capture it.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30527","description":"Jenkins WSO2 Oauth Plugin 1.0 and earlier stores the WSO2 Oauth client secret unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30526","description":"A missing permission check in Jenkins Report Portal Plugin 0.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified bearer token authentication.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30524","description":"Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for attackers to observe and capture them.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30523","description":"Jenkins Report Portal Plugin 0.5 and earlier stores ReportPortal access tokens unencrypted in job config.xml files on the Jenkins controller as part of its configuration where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30522","description":"A missing permission check in Jenkins Fogbugz Plugin 2.2.17 and earlier allows attackers with Item/Read permission to trigger builds of jobs specified in a 'jobname' request parameter.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30521","description":"A missing permission check in Jenkins Assembla merge request builder Plugin 1.1.13 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30520","description":"Jenkins Quay.io trigger Plugin 0.1 and earlier does not limit URL schemes for repository homepage URLs submitted via Quay.io trigger webhooks, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to submit crafted Quay.io trigger webhook payloads.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30519","description":"A missing permission check in Jenkins Quay.io trigger Plugin 0.1 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30518","description":"A missing permission check in Jenkins Thycotic Secret Server Plugin 1.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30517","description":"Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier unconditionally disables SSL/TLS certificate and hostname validation when connecting to a configured NeuVector Vulnerability Scanner server.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30516","description":"Jenkins Image Tag Parameter Plugin 2.0 improperly introduces an option to opt out of SSL/TLS certificate validation when connecting to Docker registries, resulting in job configurations using Image Tag Parameters that were created before 2.0 having SSL/TLS certificate validation disabled by default.","exploit_maturity":"No public exploit","published":"2023-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-30465","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the \"orderType\" parameter and the ordering of the returned content using an SQL injection attack, an attacker can extract the username of the   user with ID 1 from the \"user\" table, one character at a time.  Users are advised to upgrade to Apache InLong's 1.6.0 or cherry-pick [1] to solve it.\n \n https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html \n\n[1] https://github.com/apache/inlong/issues/7529 https://github.com/apache/inlong/issues/7529","exploit_maturity":"No public exploit","published":"2023-04-11","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-3695","description":"\nHitachi Vantara Pentaho Business Analytics Server prior to versions 9.3.0.0, 9.2.0.4 and 8.3.0.27 allow a malicious URL to inject content into a dashboard when the CDE plugin is present.   \n\n","exploit_maturity":"No public exploit","published":"2023-04-11","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-26120","description":"This affects all versions of the package com.xuxueli:xxl-job. HTML uploaded payload executed successfully through /xxl-job-admin/user/add and /xxl-job-admin/user/update.","exploit_maturity":"No public exploit","published":"2023-04-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-29016","description":"The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when using nicknames. An attacker could create a user account and enter malicious scripts into their profile's nickname, resulting in the execution in the user's browser when displaying the nickname on certain pages. The vulnerability has been fixed in version 23.03.","exploit_maturity":"No public exploit","published":"2023-04-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-29015","description":"The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in the user comment feature of Goobi viewer core prior to version 23.03. An attacker could create a specially crafted comment, resulting in the execution of malicious script code in the user's browser when displaying the comment. The vulnerability has been fixed in version 23.03.","exploit_maturity":"No public exploit","published":"2023-04-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-29014","description":"The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A reflected cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when evaluating the LOGID parameter. An attacker could trick a user into following a specially crafted link to a Goobi viewer installation, resulting in the execution of malicious script code in the user's browser. The vulnerability has been fixed in version 23.03.","exploit_maturity":"No public exploit","published":"2023-04-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-4771","description":"\nHitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malicious URL to inject content into the Pentaho User Console through session variables. \n\n","exploit_maturity":"No public exploit","published":"2023-04-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-4770","description":"\nHitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the full parametrized SQL query in an error message when an invalid character is used within a Pentaho Report (*.prpt). \n\n","exploit_maturity":"No public exploit","published":"2023-04-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-4769","description":"\nHitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the target path on host when a file is uploaded with an invalid character in its name. \n\n","exploit_maturity":"No public exploit","published":"2023-04-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-43772","description":"\nHitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x with the Big Data Plugin expose the username and password of clusters in clear text into system logs. \n\n","exploit_maturity":"No public exploit","published":"2023-04-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-43771","description":"\nHitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x, using the Pentaho Data Access plugin exposes a service endpoint for CSV import which allows a user supplied path to access resources that are out of bounds.  \n\n","exploit_maturity":"No public exploit","published":"2023-04-03","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-3960","description":"\nHitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disable scripting capabilities of the Community Dashboard Editor (CDE) plugin. \n\n","exploit_maturity":"No public exploit","published":"2023-04-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-28684","description":"Jenkins remote-jobs-view-plugin Plugin 0.0.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.","exploit_maturity":"No public exploit","published":"2023-04-02","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-28679","description":"Jenkins Mashup Portlets Plugin 1.1.2 and earlier provides the \"Generic JS Portlet\" feature that lets a user populate a portlet using a custom JavaScript expression, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission.","exploit_maturity":"No public exploit","published":"2023-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-28678","description":"Jenkins Cppcheck Plugin 1.26 and earlier does not escape file names from Cppcheck report files before showing them on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control report file contents.","exploit_maturity":"No public exploit","published":"2023-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-28675","description":"A missing permission check in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allows attackers to connect to a previously configured Octoperf server using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2023-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-28673","description":"A missing permission check in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-28672","description":"Jenkins OctoPerf Load Testing Plugin Plugin 4.5.1 and earlier does not perform a permission check in a connection test HTTP endpoint, allowing attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-28671","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-28670","description":"Jenkins Pipeline Aggregator View Plugin 1.13 and earlier does not escape a variable representing the current view's URL in inline JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission.","exploit_maturity":"No public exploit","published":"2023-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-28669","description":"Jenkins JaCoCo Plugin 3.3.2 and earlier does not escape class and method names shown on the UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control input files for the 'Record JaCoCo coverage report' post-build action.","exploit_maturity":"No public exploit","published":"2023-04-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-26283","description":"IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 248416.","exploit_maturity":"No public exploit","published":"2023-04-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-28158","description":"Privilege escalation via stored XSS using the file upload service to upload malicious content.\nThe issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges such admin user.","exploit_maturity":"No public exploit","published":"2023-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-1274","description":"A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.","exploit_maturity":"No public exploit","published":"2023-03-29","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-25722","description":"A credential-leak issue was discovered in related Veracode products before 2023-03-27. Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs, invokes the Veracode Java API Wrapper in a manner that allows local users (with OS-level access of the Jenkins remote) to discover Veracode API credentials by listing the process and its arguments. Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs and when the \"Connect using proxy\" option is enabled and configured with proxy credentials, allows local users of the Jenkins remote to discover proxy credentials by listing the process and its arguments. Veracode Azure DevOps Extension before 3.20.0 invokes the Veracode Java API Wrapper in a manner that allows local users (with OS-level access to the Azure DevOps Services cloud infrastructure or Azure DevOps Server) to discover Veracode API credentials by listing the process and its arguments. Veracode Azure DevOps Extension before 3.20.0, when configured with proxy credentials, allows users (with shell access to the Azure DevOps Services cloud infrastructure or Azure DevOps Server) to discover proxy credentials by listing the process and its arguments.","exploit_maturity":"No public exploit","published":"2023-03-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-25721","description":"Veracode Scan Jenkins Plugin before 23.3.19.0, when the \"Connect using proxy\" option is enabled and configured with proxy credentials and when the Jenkins global system setting debug is enabled and when a scan is configured for remote agent jobs, allows users (with access to view the job log) to discover proxy credentials.","exploit_maturity":"No public exploit","published":"2023-03-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-28640","description":"Apiman is a flexible and open source API Management platform. Due to a missing permissions check, an attacker with an authenticated Apiman Manager account may be able to gain access to API keys they do not have permission for if they correctly guess the URL, which includes Organisation ID, Client ID, and Client Version of the targeted non-permitted resource. While not trivial to exploit, it could be achieved by brute-forcing or guessing common names. Access to the non-permitted API Keys could allow use of other users' resources without their permission (depending on the specifics of configuration, such as whether an API key is the only form of security). Apiman 3.1.0.Final resolved this issue. Users are advised to upgrade. The only known workaround is to restrict account access.\n","exploit_maturity":"No public exploit","published":"2023-03-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-28628","description":"lambdaisland/uri is a pure Clojure/ClojureScript URI library. In versions prior to 1.14.120 `authority-regex` allows an attacker to send malicious URLs to be parsed by the `lambdaisland/uri` and return the wrong authority. This issue is similar to but distinct from CVE-2020-8910. The regex in question doesn't handle the backslash (`\\`) character in the username correctly, leading to a wrong output. ex. a payload of `https://example.com\\\\@google.com` would return that the host is `google.com`, but the correct host should be `example.com`. Given that the library returns the wrong authority this may be abused to bypass host restrictions depending on how the library is used in an application. Users are advised to upgrade. There are no known workarounds for this vulnerability.","exploit_maturity":"Proof of concept only","published":"2023-03-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-27096","description":"Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker to obtain sensitive information via the ConfigVerifyController function of the Tenant Management module.","exploit_maturity":"No public exploit","published":"2023-03-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-2237","description":"A flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerability in the checkSso function.","exploit_maturity":"No public exploit","published":"2023-03-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-20861","description":"In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.","exploit_maturity":"No public exploit","published":"2023-03-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-20859","description":"In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.","exploit_maturity":"No public exploit","published":"2023-03-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-0056","description":"An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.","exploit_maturity":"No public exploit","published":"2023-03-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-28708","description":"When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure attribute. This could result in the user agent transmitting the session cookie over an insecure channel.\n\nOlder, EOL versions may also be affected.","exploit_maturity":"No public exploit","published":"2023-03-22","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2023-27095","description":"Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker toescalate privileges via the AddUser method of the UserController function in Tenant Management module.","exploit_maturity":"Proof of concept only","published":"2023-03-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24279","description":"A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard.","exploit_maturity":"No public exploit","published":"2023-03-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-27904","description":"Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers.","exploit_maturity":"No public exploit","published":"2023-03-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-27903","description":"Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a file parameter through the CLI, potentially allowing attackers with access to the Jenkins controller file system to read and write the file before it is used.","exploit_maturity":"No public exploit","published":"2023-03-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-27902","description":"Jenkins 2.393 and earlier, LTS 2.375.3 and earlier shows temporary directories related to job workspaces, which allows attackers with Item/Workspace permission to access their contents.","exploit_maturity":"No public exploit","published":"2023-03-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-26479","description":"XWiki Platform is a generic wiki platform. Starting in version 6.0, users with write rights can insert well-formed content that is not handled well by the parser. As a consequence, some pages becomes unusable, including the user index (if the page containing the faulty content is a user page) and the page index.\n\nNote that on the page, the normal UI is completely missing and it is not possible to open the editor directly to revert the change as the stack overflow is already triggered while getting the title of the document. This means that it is quite difficult to remove this content once inserted.\n\nThis has been patched in XWiki 13.10.10, 14.4.6, and 14.9-rc-1. A temporary workaround to avoid Stack Overflow errors is to increase the memory allocated to the stack by using the `-Xss` JVM parameter (e.g., `-Xss32m`). This should allow the parser to pass and to fix the faulty content. The consequences for other aspects of the system (e.g., performance) are unknown, and this workaround should be only be used as a temporary solution. The workaround does not prevent the issue occurring again with other content. Consequently, it is strongly advised to upgrade to a version where the issue has been patched.","exploit_maturity":"No public exploit","published":"2023-03-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-26473","description":"XWiki Platform is a generic wiki platform. Starting in version 1.3-rc-1, any user with edit right can execute arbitrary database select and access data stored in the database. The problem has been patched in XWiki 13.10.11, 14.4.7, and 14.10. There is no workaround for this vulnerability other than upgrading.","exploit_maturity":"No public exploit","published":"2023-03-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-26056","description":"XWiki Platform is a generic wiki platform. Starting in version 3.0-milestone-1, it's possible to execute a script with the right of another user, provided the target user does not have programming right. The problem has been patched in XWiki 14.8-rc-1, 14.4.5, and 13.10.10. There are no known workarounds for this issue.","exploit_maturity":"No public exploit","published":"2023-03-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-25806","description":"OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. There is an observable discrepancy in the authentication response time between calls where the user provided exists and calls where it does not. This issue only affects calls using the internal basic identity provider (IdP), and not other externally configured IdPs. Patches were released in versions 1.3.9 and 2.6.0, there are no workarounds.","exploit_maturity":"No public exploit","published":"2023-03-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-25621","description":"Privilege Escalation vulnerability in Apache Software Foundation Apache Sling.\nAny content author is able to create i18n dictionaries in the repository in a location the author has write access to. As these translations are used across the whole product, it allows an author to change any text or dialog in the product. For example an attacker might fool someone by changing the text on a delete button to \"Info\".\nThis issue affects the i18n module of Apache Sling up to version 2.5.18. Version 2.6.2 and higher limit by default i18m dictionaries to certain paths in the repository (/libs and /apps).\n\nUsers of the module are advised to update to version 2.6.2 or higher, check the configuration for resource loading and then adjust the access permissions for the configured path accordingly.\n\n\n","exploit_maturity":"No public exploit","published":"2023-02-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-0869","description":"Cross-site scripting in outage/list.htm in multiple versions of OpenNMS Meridian and Horizon allows an attacker access to confidential session information. The solution is to upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4 or newer. \n\n\n\n\n\n\n\n\n\n\n\nMeridian\nand Horizon installation instructions state that they are intended for\ninstallation within an organization's private networks and should not be\ndirectly accessible from the Internet.\n\n","exploit_maturity":"No public exploit","published":"2023-02-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-0868","description":"Reflected cross-site scripting in graph results in multiple versions of OpenNMS Meridian and Horizon could allow an attacker access to steal session cookies. Users\nshould upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and\nHorizon installation instructions state that they are intended for installation\nwithin an organization's private networks and should not be directly accessible\nfrom the Internet.\n\n\n\n\n\n\n\n\n\n\n","exploit_maturity":"No public exploit","published":"2023-02-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-0867","description":"Multiple stored and reflected cross-site scripting vulnerabilities in webapp jsp pages in multiple versions of OpenNMS Meridian and Horizon could allow an attacker access to confidential session information. Users\nshould upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and\nHorizon installation instructions state that they are intended for installation\nwithin an organization's private networks and should not be directly accessible\nfrom the Internet.\n\n\n\n\n\n\n\n","exploit_maturity":"No public exploit","published":"2023-02-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-0815","description":"Potential Insertion of Sensitive Information into Jetty Log Files in multiple versions of OpenNMS Meridian and Horizon could allow disclosure of usernames and passwords if the logging level is set to debug. Users\nshould upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and\nHorizon installation instructions state that they are intended for installation\nwithin an organization's private networks and should not be directly accessible\nfrom the Internet.\n\n\n\n\n\n\n","exploit_maturity":"No public exploit","published":"2023-02-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-0044","description":"If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack can be prevented with the Quarkus CSRF Prevention feature.","exploit_maturity":"No public exploit","published":"2023-02-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-0846","description":"Unauthenticated, stored cross-site scripting in the display of alarm reduction keys in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confidential session information. Users\nshould upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and\nHorizon installation instructions state that they are intended for installation\nwithin an organization's private networks and should not be directly accessible\nfrom the Internet.","exploit_maturity":"No public exploit","published":"2023-02-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-25569","description":"Apollo is a configuration management system. Prior to version 2.1.0, a low-privileged user can create a special web page. If an authenticated portal admin visits this page, the page can silently send a request to assign new roles for that user without any confirmation from the Portal admin. Cookie SameSite strategy was set to Lax in version 2.1.0. As a workaround, avoid visiting unknown source pages.\n","exploit_maturity":"No public exploit","published":"2023-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-0482","description":"In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.","exploit_maturity":"No public exploit","published":"2023-02-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-25768","description":"A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server.","exploit_maturity":"No public exploit","published":"2023-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-25766","description":"A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-25764","description":"Jenkins Email Extension Plugin 2.93 and earlier does not escape, sanitize, or sandbox rendered email template output or log output generated during template rendering, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or change custom email templates.","exploit_maturity":"No public exploit","published":"2023-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-25763","description":"Jenkins Email Extension Plugin 2.93 and earlier does not escape various fields included in bundled email templates, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control affected fields.","exploit_maturity":"No public exploit","published":"2023-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-25762","description":"Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.","exploit_maturity":"Forecast only","published":"2023-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-25761","description":"Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin.","exploit_maturity":"No public exploit","published":"2023-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-23850","description":"A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-23848","description":"Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24815","description":"Vert.x-Web is a set of building blocks for building web applications in the java programming language. When running vertx web applications that serve files using `StaticHandler` on Windows Operating Systems and Windows File Systems, if the mount point is a wildcard (`*`) then an attacker can exfiltrate any class path resource. When computing the relative path to locate the resource, in case of wildcards, the code: `return \"/\" + rest;` from `Utils.java` returns the user input (without validation) as the segment to lookup. Even though checks are performed to avoid escaping the sandbox, given that the input was not sanitized `\\` are not properly handled and an attacker can build a path that is valid within the classpath. This issue only affects users deploying in windows environments and upgrading is the advised remediation path. There are no known workarounds for this vulnerability.","exploit_maturity":"Proof of concept only","published":"2023-02-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-22849","description":"An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.4 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in multiple features.\n\nUpgrade to Apache Sling App CMS \u003e= 1.1.6\n","exploit_maturity":"No public exploit","published":"2023-02-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-0674","description":"A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality of the file /user/updatePwd of the component New Password Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220196.","exploit_maturity":"No public exploit","published":"2023-02-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-44644","description":"In Apache Linkis \u003c=1.3.0 when used with the MySQL Connector/J in the data source module, an authenticated attacker could read arbitrary local files by connecting a rogue MySQL server, By adding allowLoadLocalInfile to true in the JDBC parameter. Therefore, the parameters in the JDBC URL should be blacklisted. Versions of Apache Linkis \u003c= 1.3.0 will be affected. \n\nWe recommend users upgrade the version of Linkis to version 1.3.1\n","exploit_maturity":"No public exploit","published":"2023-01-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24459","description":"A missing permission check in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24457","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in to the attacker's account.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24455","description":"Jenkins visualexpert Plugin 1.3 and earlier does not restrict the names of files in methods implementing form validation, allowing attackers with Item/Configure permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-24454","description":"Jenkins TestQuality Updater Plugin 1.3 and earlier stores the TestQuality Updater password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24453","description":"A missing check in Jenkins TestQuality Updater Plugin 1.3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24451","description":"A missing permission check in Jenkins Cisco Spark Notifier Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24450","description":"Jenkins view-cloner Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24449","description":"Jenkins PWauth Security Realm Plugin 0.4 and earlier does not restrict the names of files in methods implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-24448","description":"A missing permission check in Jenkins RabbitMQ Consumer Plugin 2.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified AMQP(S) URL using attacker-specified username and password.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24445","description":"Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24442","description":"Jenkins GitHub Pull Request Coverage Status Plugin 2.2.0 and earlier stores the GitHub Personal Access Token, Sonar access token and Sonar password unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24440","description":"Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier transmits the private key in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24439","description":"Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier stores the private keys unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24438","description":"A missing permission check in Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24436","description":"A missing permission check in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24435","description":"A missing permission check in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24433","description":"Missing permission checks in Jenkins Orka by MacStadium Plugin 1.31 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24431","description":"A missing permission check in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24428","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to trick users into logging in to the attacker's account.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24425","description":"Jenkins Kubernetes Credentials Provider Plugin 1.208.v128ee9800c04 and earlier does not set the appropriate context for Kubernetes credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Kubernetes credentials they are not entitled to.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-24423","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Gerrit Trigger Plugin 2.38.0 and earlier allows attackers to rebuild previous builds triggered by Gerrit.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-23613","description":"OpenSearch is an open source distributed and RESTful search engine. In affected versions there is an issue in the implementation of field-level security (FLS) and field masking where rules written to explicitly exclude fields are not correctly applied for certain queries that rely on their auto-generated .keyword fields. This issue is only present for authenticated users with read access to the indexes containing the restricted fields. This may expose data which may otherwise not be accessible to the user. OpenSearch 1.0.0-1.3.7 and 2.0.0-2.4.1 are affected. Users are advised to upgrade to OpenSearch 1.3.8 or 2.5.0. Users unable to upgrade may write explicit exclusion rules as a workaround. Policies authored in this way are not subject to this issue.","exploit_maturity":"No public exploit","published":"2023-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-21892","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer). Supported versions that are affected are 5.9.0.0.0 and 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21891","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer). Supported versions that are affected are 5.9.0.0.0 and 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21888","description":"Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering (component: WebUI). Supported versions that are affected are 18.8.0-18.8.15, 19.12.0-19.12.15, 20.12.0-20.12.10 and 21.12.0-21.12.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Gateway. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Gateway, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Gateway accessible data as well as unauthorized read access to a subset of Primavera Gateway accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21861","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer). Supported versions that are affected are 5.9.0.0.0 and 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21859","description":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Access Manager executes to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Access Manager accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21847","description":"Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Download). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Web Applications Desktop Integrator, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Web Applications Desktop Integrator accessible data as well as unauthorized read access to a subset of Oracle Web Applications Desktop Integrator accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21845","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). The supported version that is affected is 8.60. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21844","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21834","description":"Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Workflow, Approval, Work Force Management). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Self-Service Human Resources. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Self-Service Human Resources accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21831","description":"Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft (component: Advising Notes). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Academic Advisement. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise CS Academic Advisement accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21830","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf; Oracle GraalVM Enterprise Edition: 20.3.8 and 21.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2023-01-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2023-21825","description":"Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Supplier Management). Supported versions that are affected are 12.2.6-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupplier Portal. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iSupplier Portal accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-21824","description":"Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications Applications (component: Customer, Config, Pricing Manager). Supported versions that are affected are 12.0.0.3.0-12.0.0.7.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Communications BRM - Elastic Charging Engine executes to compromise Oracle Communications BRM - Elastic Charging Engine. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications BRM - Elastic Charging Engine accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2023-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2023-0105","description":"A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.","exploit_maturity":"No public exploit","published":"2023-01-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-24913","description":"Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdTempFileProvider.java, which uses the permissive File.createTempFile() function, exposing temporary file contents.","exploit_maturity":"No public exploit","published":"2023-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2023-22899","description":"Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive.","exploit_maturity":"Proof of concept only","published":"2023-01-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-46769","description":"An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.2 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in the site group feature.\n\nUpgrade to Apache Sling App CMS \u003e= 1.1.4 \n","exploit_maturity":"No public exploit","published":"2023-01-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45935","description":"Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. \n\nVulnerable components includes the SMTP stack and IMAP APPEND command.\n\nThis issue affects Apache James server version 3.7.2 and prior versions.","exploit_maturity":"No public exploit","published":"2023-01-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45787","description":"Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local users. This issue affects Apache James MIME4J version 0.8.8 and prior versions.\n\nWe recommend users to upgrade to MIME4j version 0.8.9 or later.\n","exploit_maturity":"No public exploit","published":"2023-01-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-32828","description":"The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the `oauth2` REST API is vulnerable to Reflected Cross-Site Scripting (XSS). This XSS can be escalated to Remote Code Execution (RCE) by levering the automation API.","exploit_maturity":"Proof of concept only","published":"2023-01-05","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-23554","description":"Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows Authentication Filter bypass. The AuthenticationFilter relies on the request URI to evaluate if the user is accessing the swagger endpoint. By accessing a URL with a path such as /api/foo;%2fapi%2fswagger the contains condition will hold and will return from the authentication filter without aborting the request. Note that the principal object will not be assigned and therefore the issue wont allow user impersonation. This issue has been fixed in version 1.10.4. There are no known workarounds.","exploit_maturity":"No public exploit","published":"2022-12-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-4640","description":"A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216499.","exploit_maturity":"Proof of concept only","published":"2022-12-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-47551","description":"Apiman 1.5.7 through 2.2.3.Final has insufficient checks for read permissions within the Apiman Manager REST API. The root cause of the issue is the Apiman project's accidental acceptance of a large contribution that was not fully compatible with the security model of Apiman versions before 3.0.0.Final. Because of this, 3.0.0.Final is not affected by the vulnerability.","exploit_maturity":"No public exploit","published":"2022-12-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-47500","description":"URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI component.This issue affects Apache Helix all releases from 0.8.0 to 1.0.4.\n\n\n\nSolution: removed the the forward component since it was improper designed for UI embedding.\n\n User please upgrade to 1.1.0 to fix this issue.\n\n","exploit_maturity":"No public exploit","published":"2022-12-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-46870","description":"An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Zeppelin allows logged-in users to execute arbitrary javascript in other users' browsers.\nThis issue affects Apache Zeppelin before 0.8.2. Users are recommended to upgrade to a supported version of Zeppelin.\n\n\n","exploit_maturity":"No public exploit","published":"2022-12-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-28655","description":"The improper Input Validation vulnerability in \"”Move folder to Trash” feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.","exploit_maturity":"No public exploit","published":"2022-12-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-4521","description":"A vulnerability classified as problematic has been found in WSO2 carbon-registry up to 4.8.6. This affects an unknown part of the component Request Parameter Handler. The manipulation of the argument parentPath/path/username/path/profile_menu leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 4.8.7 is able to address this issue. The name of the patch is 9f967abfde9317bee2cda469dbc09b57d539f2cc. It is recommended to upgrade the affected component. The identifier VDB-215901 was assigned to this vulnerability.","exploit_maturity":"No public exploit","published":"2022-12-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-4520","description":"A vulnerability was found in WSO2 carbon-registry up to 4.8.11. It has been rated as problematic. Affected by this issue is some unknown functionality of the file components/registry/org.wso2.carbon.registry.search.ui/src/main/resources/web/search/advancedSearchForm-ajaxprocessor.jsp of the component Advanced Search. The manipulation of the argument mediaType/rightOp/leftOp/rightPropertyValue/leftPropertyValue leads to cross site scripting. The attack may be launched remotely. Upgrading to version 4.8.12 is able to address this issue. The name of the patch is 0c827cc1b14b82d8eb86117ab2e43c34bb91ddb4. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-215900.","exploit_maturity":"Proof of concept only","published":"2022-12-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-32531","description":"The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves\nthe bookkeeper client vulnerable to a man in the middle attack.\n\nThe problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.","exploit_maturity":"No public exploit","published":"2022-12-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41915","description":"Netty project is an event-driven asynchronous network application framework. Starting in version 4.1.83.Final and prior to 4.1.86.Final, when calling `DefaultHttpHeadesr.set` with an _iterator_ of values, header value validation was not performed, allowing malicious header values in the iterator to perform HTTP Response Splitting. This issue has been patched in version 4.1.86.Final. Integrators can work around the issue by changing the `DefaultHttpHeaders.set(CharSequence, Iterator\u003c?\u003e)` call, into a `remove()` call, and call `add()` in a loop over the iterator of values.","exploit_maturity":"Proof of concept only","published":"2022-12-13","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2022-46688","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows attackers to have Jenkins connect to Gerrit servers (previously configured by Jenkins administrators) using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-12-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-46687","description":"Jenkins Spring Config Plugin 2.0.0 and earlier does not escape build display names shown on the Spring Config view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to change build display names.","exploit_maturity":"No public exploit","published":"2022-12-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-46686","description":"Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display names on the Custom Build Properties and Build Summary pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set or change these values.","exploit_maturity":"No public exploit","published":"2022-12-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-46685","description":"In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.","exploit_maturity":"No public exploit","published":"2022-12-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-46684","description":"Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2022-12-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-46683","description":"Jenkins Google Login Plugin 1.4 through 1.6 (both inclusive) improperly determines that a redirect URL after login is legitimately pointing to Jenkins.","exploit_maturity":"No public exploit","published":"2022-12-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-4350","description":"A vulnerability, which was classified as problematic, was found in Mingsoft MCMS 5.2.8. Affected is an unknown function of the file search.do. The manipulation of the argument content_title leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-215112.","exploit_maturity":"Proof of concept only","published":"2022-12-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-4348","description":"A vulnerability was found in y_project RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-215108.","exploit_maturity":"Proof of concept only","published":"2022-12-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45910","description":"Improper neutralization of special elements used in an LDAP query ('LDAP Injection') vulnerability in ActiveDirectory and Sharepoint ActiveDirectory authority connectors of Apache ManifoldCF allows an attacker to manipulate the LDAP search queries (DoS, additional queries, filter manipulation) during user lookup, if the username or the domain string are passed to the UserACLs servlet without validation.\n\nThis issue affects Apache ManifoldCF version 2.23 and prior versions.","exploit_maturity":"No public exploit","published":"2022-12-07","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-37533","description":"Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711.","exploit_maturity":"No public exploit","published":"2022-12-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-41965","description":"Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 12.5, Opencast's Paella authentication page could be used to redirect to an arbitrary URL for authenticated users. The vulnerability allows attackers to redirect users to sites outside of one's Opencast install, potentially facilitating phishing attacks or other security issues. This issue is fixed in Opencast 12.5 and newer.","exploit_maturity":"No public exploit","published":"2022-11-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45210","description":"Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin.","exploit_maturity":"Proof of concept only","published":"2022-11-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-45208","description":"Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin.","exploit_maturity":"Proof of concept only","published":"2022-11-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-41946","description":"pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `PreparedStatement.setText(int, InputStream)` or `PreparedStatemet.setBytea(int, InputStream)` will create a temporary file if the InputStream is larger than 2k. This will create a temporary file which is readable by other users on Unix like systems, but not MacOS. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this directory they are, by default, readable by other users on that same system. This vulnerability does not allow other users to overwrite the contents of these directories or files. This is purely an information disclosure vulnerability. Because certain JDK file system APIs were only added in JDK 1.7, this this fix is dependent upon the version of the JDK you are using. Java 1.7 and higher users: this vulnerability is fixed in 4.5.0. Java 1.6 and lower users: no patch is available. If you are unable to patch, or are stuck running on Java 1.6, specifying the java.io.tmpdir system environment variable to a directory that is exclusively owned by the executing user will mitigate this vulnerability.","exploit_maturity":"No public exploit","published":"2022-11-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41935","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users without the right to view documents can deduce their existence by repeated Livetable queries. The issue has been patched in XWiki 14.6RC1, 13.10.8, and 14.4.3, the response is not properly cleaned up of obfuscated entries. As a workaround, The patch for the document `XWiki.LiveTableResultsMacros` can be manually applied or a XAR archive of a patched version can be imported, on versions 12.10.11, 13.9-rc-1, and 13.4.4. There are no known workarounds for this issue.","exploit_maturity":"Proof of concept only","published":"2022-11-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41933","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When the `reset a forgotten password` feature of XWiki was used, the password was then stored in plain text in database. This only concerns XWiki 13.1RC1 and newer versions. Note that it only concerns the reset password feature available from the \"Forgot your password\" link in the login view: the features allowing a user to change their password, or for an admin to change a user password are not impacted. This vulnerability is particularly dangerous in combination with other vulnerabilities allowing to perform data leak of personal data from users, such as GHSA-599v-w48h-rjrm. Note that this vulnerability only concerns the users of the main wiki: in case of farms, the users registered on subwiki are not impacted thanks to a bug we discovered when investigating this. The problem has been patched in version 14.6RC1, 14.4.3 and 13.10.8. The patch involves a migration of the impacted users as well as the history of the page, to ensure no password remains in plain text in the database. This migration also involves to inform the users about the possible disclosure of their passwords: by default, two emails are automatically sent to the impacted users. A first email to inform about the possibility that their password have been leaked, and a second email using the reset password feature to ask them to set a new password. It's also possible for administrators to set some properties for the migration: it's possible to decide if the user password should be reset (default) or if the passwords should be kept but only hashed. Note that in the first option, the users won't be able to login anymore until they set a new password if they were impacted. Note that in both options, mails will be sent to users to inform them and encourage them to change their passwords.","exploit_maturity":"No public exploit","published":"2022-11-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41929","description":"org.xwiki.platform:xwiki-platform-oldcore is missing authorization in User#setDisabledStatus, which may allow an incorrectly authorized user with only Script rights to enable or disable a user. This operation is meant to only be available for users with admin rights. This problem has been patched in XWiki 13.10.7, 14.4.2 and 14.5RC1.","exploit_maturity":"Proof of concept only","published":"2022-11-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45146","description":"An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4. Changes to the JVM garbage collector in Java 13 and later trigger an issue in the BC-FJA FIPS modules where it is possible for temporary keys used by the module to be zeroed out while still in use by the module, resulting in errors or potential information loss. NOTE: FIPS compliant users are unaffected because the FIPS certification is only for Java 7, 8, and 11.","exploit_maturity":"No public exploit","published":"2022-11-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45401","description":"Jenkins Associated Files Plugin 0.2.1 and earlier does not escape names of associated files, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45399","description":"A missing permission check in Jenkins Cluster Statistics Plugin 0.4.6 and earlier allows attackers to delete recorded Jenkins Cluster Statistics.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45398","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Cluster Statistics Plugin 0.4.6 and earlier allows attackers to delete recorded Jenkins Cluster Statistics.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45394","description":"A missing permission check in Jenkins Delete log Plugin 1.0 and earlier allows attackers with Item/Read permission to delete build logs.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45392","description":"Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by attackers with Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45390","description":"A missing permission check in Jenkins loader.io Plugin 1.0.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45389","description":"A missing permission check in Jenkins XP-Dev Plugin 1.0 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to an attacker-specified repository.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45387","description":"Jenkins BART Plugin 1.0.3 and earlier does not escape the parsed content of build logs before rendering it on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45386","description":"Jenkins Violations Plugin 0.7.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-45384","description":"Jenkins Reverse Proxy Auth Plugin 1.7.3 and earlier stores the LDAP manager password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45383","description":"An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with Support/DownloadBundle permission to download a previously created support bundle containing information limited to users with Overall/Administer permission.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45382","description":"Jenkins Naginator Plugin 1.18.1 and earlier does not escape display names of source builds in builds that were triggered via Retry action, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to edit build display names.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-45380","description":"Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links in an unsafe manner, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42132","description":"The Test LDAP Users functionality in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.0 fix pack 102 and earlier, 7.1 before fix pack 27, 7.2 before fix pack 17, 7.3 before update 4, and DXP 7.4 GA includes the LDAP credential in the page URL when paginating through the list of users, which allows man-in-the-middle attackers or attackers with access to the request logs to see the LDAP credential.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42131","description":"Certain Liferay products are affected by: Missing SSL Certificate Validation in the Dynamic Data Mapping module's REST data providers. This affects Liferay Portal 7.1.0 through 7.4.2 and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42130","description":"The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.4.3.4, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 19, 7.3 before update 4, and 7.4 GA does not properly check permission of form entries, which allows remote authenticated users to view and access all form entries.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42129","description":"An Insecure direct object reference (IDOR) vulnerability in the Dynamic Data Mapping module in Liferay Portal 7.3.2 through 7.4.3.4, and Liferay DXP 7.3 before update 4, and 7.4 GA allows remote authenticated users to view and access form entries via the `formInstanceRecordId` parameter.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42128","description":"The Hypermedia REST APIs module in Liferay Portal 7.4.1 through 7.4.3.4, and Liferay DXP 7.4 GA does not properly check permissions, which allows remote attackers to obtain a WikiNode object via the WikiNodeResource.getSiteWikiNodeByExternalReferenceCode API.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42127","description":"The Friendly Url module in Liferay Portal 7.4.3.5 through 7.4.3.36, and Liferay DXP 7.4 update 1 though 36 does not properly check user permissions, which allows remote attackers to obtain the history of all friendly URLs that was assigned to a page.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42126","description":"The Asset Libraries module in Liferay Portal 7.3.5 through 7.4.3.28, and Liferay DXP 7.3 before update 8, and DXP 7.4 before update 29 does not properly check permissions of asset libraries, which allows remote authenticated users to view asset libraries via the UI.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42119","description":"Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42118","description":"A Cross-site scripting (XSS) vulnerability in the Portal Search module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 15, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the `tag` parameter.","exploit_maturity":"Working exploit published","published":"2022-11-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2022-42111","description":"A Cross-site scripting (XSS) vulnerability in the Sharing module's user notification in Liferay Portal 7.2.1 through 7.4.2, and Liferay DXP 7.2 before fix pack 19, and 7.3 before update 4 allows remote attackers to inject arbitrary web script or HTML by sharing an asset with a crafted payload.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42110","description":"A Cross-site scripting (XSS) vulnerability in the Announcements module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41918","description":"OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. There is an issue with the implementation of fine-grained access control rules (document-level security, field-level security and field masking) where they are not correctly applied to the indices that back data streams potentially leading to incorrect access authorization. OpenSearch 1.3.7 and 2.4.0 contain a fix for this issue. Users are advised to update. There are no known workarounds for this issue.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-40309","description":"Users with write permissions to a repository can delete arbitrary directories.","exploit_maturity":"No public exploit","published":"2022-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41854","description":"Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.","exploit_maturity":"No public exploit","published":"2022-11-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-40750","description":"IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236588.","exploit_maturity":"No public exploit","published":"2022-11-11","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-36022","description":"Deeplearning4J is a suite of tools for deploying and training deep learning models using the JVM. Packages org.deeplearning4j:dl4j-examples and org.deeplearning4j:platform-tests through version 1.0.0-M2.1 may use some unclaimed S3 buckets in tests in examples. This is likely affect people who use some older NLP examples that reference an old S3 bucket. The problem has been patched. Users should upgrade to snapshots as Deeplearning4J plan to publish a release with the fix at a later date. As a workaround, download a word2vec google news vector from a new source using git lfs from here.","exploit_maturity":"No public exploit","published":"2022-11-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-44244","description":"An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator.","exploit_maturity":"Proof of concept only","published":"2022-11-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-38712","description":"\"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web services could allow a man-in-the-middle attacker to conduct SOAPAction spoofing to execute unwanted or unauthorized operations. IBM X-Force ID: 234762.\"","exploit_maturity":"No public exploit","published":"2022-11-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-43670","description":"An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.0 and prior may allow an authenticated remote attacker to perform a reflected cross site scripting (XSS) attack in the taxonomy management feature.","exploit_maturity":"No public exploit","published":"2022-11-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34662","description":"When users add resources to the resource center with a relation path will cause path traversal issues and only for logged-in users. You could upgrade to version 3.0.0 or higher","exploit_maturity":"No public exploit","published":"2022-11-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-31777","description":"A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.","exploit_maturity":"No public exploit","published":"2022-11-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-26884","description":"Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher.","exploit_maturity":"No public exploit","published":"2022-10-28","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-34870","description":"Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse web application to view Region entries.","exploit_maturity":"No public exploit","published":"2022-10-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-39259","description":"jadx is a set of command line and GUI tools for producing Java source code from Android Dex and Apk files. versions prior to 1.4.5 are subject to a Denial of Service when opening zip files with HTML sequences. This issue has been patched in version 1.4.5. There are no known workarounds.","exploit_maturity":"Proof of concept only","published":"2022-10-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-40084","description":"OpenCRX before v5.2.2 was discovered to be vulnerable to password enumeration due to the difference in error messages received during a password reset which could enable an attacker to determine if a username, email or ID is valid.","exploit_maturity":"Proof of concept only","published":"2022-10-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43435","description":"Jenkins 360 FireLine Plugin 1.7.2 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43434","description":"Jenkins NeuVector Vulnerability Scanner Plugin 1.20 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43433","description":"Jenkins ScreenRecorder Plugin 0.7 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43432","description":"Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43431","description":"Jenkins Compuware Strobe Measurement Plugin 1.0.1 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43428","description":"Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43427","description":"Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43426","description":"Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potential for attackers to observe and capture it.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43425","description":"Jenkins Custom Checkbox Parameter Plugin 1.4 and earlier does not escape the name and description of Custom Checkbox Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43424","description":"Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43423","description":"Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43422","description":"Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43421","description":"A missing permission check in Jenkins Tuleap Git Branch Source Plugin 3.2.4 and earlier allows unauthenticated attackers to trigger Tuleap projects whose configured repository matches the attacker-specified value.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43420","description":"Jenkins Contrast Continuous Application Security Plugin 3.9 and earlier does not escape data returned from the Contrast service when generating a report, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control or modify Contrast service API responses.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43419","description":"Jenkins Katalon Plugin 1.0.32 and earlier stores API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43418","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Katalon Plugin 1.0.33 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43417","description":"Jenkins Katalon Plugin 1.0.32 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43414","description":"Jenkins NUnit Plugin 0.27 and earlier implements an agent-to-controller message that parses files inside a user-specified directory as test results, allowing attackers able to control agent processes to obtain test results from files in an attacker-specified directory on the Jenkins controller.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43413","description":"Jenkins Job Import Plugin 3.5 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43412","description":"Jenkins Generic Webhook Trigger Plugin 1.84.1 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43411","description":"Jenkins GitLab Plugin 1.5.35 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43410","description":"Jenkins Mercurial Plugin 1251.va_b_121f184902 and earlier provides information about which jobs were triggered or scheduled for polling through its webhook endpoint, including jobs the user has no permission to access.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43409","description":"Jenkins Pipeline: Supporting APIs Plugin 838.va_3a_087b_4055b and earlier does not sanitize or properly encode URLs of hyperlinks sending POST requests in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create Pipelines.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-43408","description":"Jenkins Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of 'input' steps when using it to generate URLs to proceed or abort Pipeline builds, allowing attackers able to configure Pipelines to specify 'input' step IDs resulting in URLs that would bypass the CSRF protection of any target URL in Jenkins.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42467","description":"When running in prototype mode, the h2 webconsole module (accessible from the Prototype menu) is automatically made available with the ability to directly query the database. It was felt that it is safer to require the developer to explicitly enable this capability. As of 2.0.0-M8, this can now be done using the 'isis.prototyping.h2-console.web-allow-remote-access' configuration property; the web console will be unavailable without setting this configuration. As an additional safeguard, the new 'isis.prototyping.h2-console.generate-random-web-admin-password' configuration parameter (enabled by default) requires that the administrator use a randomly generated password to use the console. The password is printed to the log, as \"webAdminPass: xxx\" (where \"xxx\") is the password. To revert to the original behaviour, the administrator would therefore need to set these configuration parameter: isis.prototyping.h2-console.web-allow-remote-access=true isis.prototyping.h2-console.generate-random-web-admin-password=false Note also that the h2 webconsole is never available in production mode, so these safeguards are only to ensure that the webconsole is secured by default also in prototype mode.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42466","description":"Prior to 2.0.0-M9, it was possible for an end-user to set the value of an editable string property of a domain object to a value that would be rendered unchanged when the value was saved. In particular, the end-user could enter javascript or similar and this would be executed. As of this release, the inputted strings are properly escaped when rendered.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-31684","description":"Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-2805","description":"A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-style. This flaw allows an attacker with sufficient privileges to read the log file, leading to confidentiality loss.","exploit_maturity":"No public exploit","published":"2022-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42117","description":"A Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.3.2 through 7.4.3.16, and Liferay DXP 7.3 before update 6, and 7.4 before update 17 allows remote attackers to inject arbitrary web script or HTML.","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42116","description":"A Cross-site scripting (XSS) vulnerability in the Frontend Editor module's integration with CKEditor in Liferay Portal 7.3.2 through 7.4.3.14, and Liferay DXP 7.3 before update 6, and 7.4 before update 15 allows remote attackers to inject arbitrary web script or HTML via the (1) name, or (2) namespace parameter.","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42115","description":"Cross-site scripting (XSS) vulnerability in the Object module's edit object details page in Liferay Portal 7.4.3.4 through 7.4.3.36 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the object field's `Label` text field.","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42114","description":"A Cross-site scripting (XSS) vulnerability in the Role module's edit role assignees page in Liferay Portal 7.4.0 through 7.4.3.36, and Liferay DXP 7.4 before update 37 allows remote attackers to inject arbitrary web script or HTML.","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42113","description":"A Cross-site scripting (XSS) vulnerability in Document Library module in Liferay Portal 7.4.3.30 through 7.4.3.36, and Liferay DXP 7.4 update 30 through update 36 allows remote attackers to inject arbitrary web script or HTML via the `redirect` parameter.","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-42112","description":"A Cross-site scripting (XSS) vulnerability in the Portal Search module's Sort widget in Liferay Portal 7.2.0 through 7.4.3.24, and Liferay DXP 7.2 before fix pack 19, 7.3 before update 5, and DXP 7.4 before update 25 allows remote attackers to inject arbitrary web script or HTML via a crafted payload.","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-39420","description":"Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Functional Security). Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Transportation Management accessible data as well as unauthorized read access to a subset of Oracle Transportation Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-39411","description":"Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Business Process Automation). Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Transportation Management accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-39407","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.58, 8.59 and 8.60. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-39405","description":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Access Manager accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-3339","description":"A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 Update 14 allows a remote unauthenticated attacker to potentially obtain access to an ePO administrator's session by convincing the authenticated ePO administrator to click on a carefully crafted link. This would lead to limited access to sensitive information and limited ability to alter some information in ePO.","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-3338","description":"An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker to potentially trigger a Server Side Request Forgery attack. This can be exploited by mimicking the Agent Handler call to ePO and passing the carefully constructed XML file through the API.","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21639","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search Integration). Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21636","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management). Supported versions that are affected are 12.2.6-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Applications Framework accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21631","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design Tools SEC). Supported versions that are affected are 9.2.6.4 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21630","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.6.4 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21629","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.6.4 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21628","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-21626","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21616","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle WebLogic Server executes to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server as well as unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 5.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21609","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server). The supported version that is affected is 5.9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21602","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.58, 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21601","description":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.4.0-12.0.0.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Billing and Revenue Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21597","description":"Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaScript). Supported versions that are affected are Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21591","description":"Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure). Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Transportation Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Transportation Management. CVSS 3.1 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2022-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-41414","description":"An insecure default in the component auth.login.prompt.enabled of Liferay Portal v7.0.0 through v7.4.2 allows attackers to enumerate usernames, site names, and pages.","exploit_maturity":"No public exploit","published":"2022-10-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-40160","description":"** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA rules. After review by the JXPath maintainers, the original report was found to be invalid.","exploit_maturity":"No public exploit","published":"2022-10-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-40159","description":"** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA rules. After review by the JXPath maintainers, the original report was found to be invalid.","exploit_maturity":"No public exploit","published":"2022-10-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-35282","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker with local network access could exploit this vulnerability to obtain sensitive data.","exploit_maturity":"No public exploit","published":"2022-09-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-33683","description":"Apache Pulsar Brokers and Proxies create an internal Pulsar Admin Client that does not verify peer TLS certificates, even when tlsAllowInsecureConnection is disabled via configuration. The Pulsar Admin Client's intra-cluster and geo-replication HTTPS connections are vulnerable to man in the middle attacks, which could leak authentication data, configuration data, and any other data sent by these clients. An attacker can only take advantage of this vulnerability by taking control of a machine 'between' the client and the server. The attacker must then actively manipulate traffic to perform the attack. This issue affects Apache Pulsar Broker and Proxy versions 2.7.0 to 2.7.4; 2.8.0 to 2.8.3; 2.9.0 to 2.9.2; 2.10.0; 2.6.4 and earlier.","exploit_maturity":"No public exploit","published":"2022-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-33682","description":"TLS hostname verification cannot be enabled in the Pulsar Broker's Java Client, the Pulsar Broker's Java Admin Client, the Pulsar WebSocket Proxy's Java Client, and the Pulsar Proxy's Admin Client leaving intra-cluster connections and geo-replication connections vulnerable to man in the middle attacks, which could leak credentials, configuration data, message data, and any other data sent by these clients. The vulnerability is for both the pulsar+ssl protocol and HTTPS. An attacker can only take advantage of this vulnerability by taking control of a machine 'between' the client and the server. The attacker must then actively manipulate traffic to perform the attack by providing the client with a cryptographically valid certificate for an unrelated host. This issue affects Apache Pulsar Broker, Proxy, and WebSocket Proxy versions 2.7.0 to 2.7.4; 2.8.0 to 2.8.3; 2.9.0 to 2.9.2; 2.10.0; 2.6.4 and earlier.","exploit_maturity":"No public exploit","published":"2022-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-33681","description":"Delayed TLS hostname verification in the Pulsar Java Client and the Pulsar Proxy make each client vulnerable to a man in the middle attack. Connections from the Pulsar Java Client to the Pulsar Broker/Proxy and connections from the Pulsar Proxy to the Pulsar Broker are vulnerable. Authentication data is sent before verifying the server’s TLS certificate matches the hostname, which means authentication data could be exposed to an attacker. An attacker can only take advantage of this vulnerability by taking control of a machine 'between' the client and the server. The attacker must then actively manipulate traffic to perform the attack by providing the client with a cryptographically valid certificate for an unrelated host. Because the client sends authentication data before performing hostname verification, an attacker could gain access to the client’s authentication data. The client eventually closes the connection when it verifies the hostname and identifies the targeted hostname does not match a hostname on the certificate. Because the client eventually closes the connection, the value of the intercepted authentication data depends on the authentication method used by the client. Token based authentication and username/password authentication methods are vulnerable because the authentication data can be used to impersonate the client in a separate session. This issue affects Apache Pulsar Java Client versions 2.7.0 to 2.7.4; 2.8.0 to 2.8.3; 2.9.0 to 2.9.2; 2.10.0; 2.6.4 and earlier.","exploit_maturity":"No public exploit","published":"2022-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-24280","description":"Improper Input Validation vulnerability in Proxy component of Apache Pulsar allows an attacker to make TCP/IP connection attempts that originate from the Pulsar Proxy's IP address. When the Apache Pulsar Proxy component is used, it is possible to attempt to open TCP/IP connections to any IP address and port that the Pulsar Proxy can connect to. An attacker could use this as a way for DoS attacks that originate from the Pulsar Proxy's IP address. It hasn’t been detected that the Pulsar Proxy authentication can be bypassed. The attacker will have to have a valid token to a properly secured Pulsar Proxy. This issue affects Apache Pulsar Proxy versions 2.7.0 to 2.7.4; 2.8.0 to 2.8.2; 2.9.0 to 2.9.1; 2.6.4 and earlier.","exploit_maturity":"No public exploit","published":"2022-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-39975","description":"The Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not check user permission before showing the preview of a \"Content Page\" type page, allowing attackers to view unpublished \"Content Page\" pages via URL manipulation.","exploit_maturity":"No public exploit","published":"2022-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-38648","description":"Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.","exploit_maturity":"No public exploit","published":"2022-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-38512","description":"The Translation module in Liferay Portal v7.4.3.12 through v7.4.3.36, and Liferay DXP 7.4 update 8 through 36 does not check permissions before allowing a user to export a web content for translation, allowing attackers to download a web content page's XLIFF translation file via crafted URL.","exploit_maturity":"No public exploit","published":"2022-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-38398","description":"Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.","exploit_maturity":"No public exploit","published":"2022-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28982","description":"A cross-site scripting (XSS) vulnerability in Liferay Portal v7.3.3 through v7.4.2 and Liferay DXP v7.3 before service pack 3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name of a tag.","exploit_maturity":"No public exploit","published":"2022-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28980","description":"Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal v7.4.3.4 and Liferay DXP v7.4 GA allows attackers to execute arbitrary web scripts or HTML via parameters with the filter_ prefix.","exploit_maturity":"No public exploit","published":"2022-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28979","description":"Liferay Portal v7.1.0 through v7.4.2 and Liferay DXP 7.1 before fix pack 26, 7.2 before fix pack 15, and 7.3 before service pack 3 was discovered to contain a cross-site scripting (XSS) vulnerability in the Portal Search module's Custom Facet widget. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Parameter Name text field.","exploit_maturity":"No public exploit","published":"2022-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28978","description":"Stored cross-site scripting (XSS) vulnerability in the Site module's user membership administration page in Liferay Portal 7.0.1 through 7.4.1, and Liferay DXP 7.0 before fix pack 102, 7.1 before fix pack 26, 7.2 before fix pack 15, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the a user's name.","exploit_maturity":"No public exploit","published":"2022-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28977","description":"HtmlUtil.escapeRedirect in Liferay Portal 7.3.1 through 7.4.2, and Liferay DXP 7.0 fix pack 91 through 101, 7.1 fix pack 17 through 25, 7.2 fix pack 5 through 14, and 7.3 before service pack 3 can be circumvented by using multiple forward slashes, which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, and (3) others parameters that rely on HtmlUtil.escapeRedirect.","exploit_maturity":"No public exploit","published":"2022-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41255","description":"Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job config.xml files on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41254","description":"Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41252","description":"Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allows users with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41251","description":"A missing permission check in Jenkins Apprenda Plugin 2.2.0 and earlier allows users with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41250","description":"A missing permission check in Jenkins SCM HttpClient Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41248","description":"Jenkins BigPanda Notifier Plugin 1.4.0 and earlier does not mask the BigPanda API key on the global configuration form, increasing the potential for attackers to observe and capture it.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41247","description":"Jenkins BigPanda Notifier Plugin 1.4.0 and earlier stores the BigPanda API key unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41246","description":"A missing permission check in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41242","description":"A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41240","description":"Jenkins Walti Plugin 1.0.1 and earlier does not escape the information provided by the Walti API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide malicious API responses from Walti.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41239","description":"Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41235","description":"Jenkins WildFly Deployer Plugin 1.0.2 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-41233","description":"Jenkins Rundeck Plugin 3.6.11 and earlier does not perform Run/Artifacts permission checks in multiple HTTP endpoints, allowing attackers with Item/Read permission to obtain information about build artifacts of a given job, if the optional Run/Artifacts permission is enabled.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41231","description":"Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any config.xml file on the Jenkins controller file system by providing a crafted file name to an API endpoint.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-41230","description":"Jenkins Build-Publisher Plugin 1.22 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obtain names and URLs of Jenkins servers that the plugin is configured to publish builds to, as well as builds pending for publication to those Jenkins servers.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41229","description":"Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.134 and earlier does not escape configuration options of the Execute NetStorm/NetCloud Test build step, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41225","description":"Jenkins Anchore Container Image Scanner Plugin 1.0.24 and earlier does not escape content provided by the Anchore engine API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control API responses by Anchore engine.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-41224","description":"Jenkins 2.367 through 2.369 (both inclusive) does not escape tooltips of the l:helpIcon UI component used for some help icons on the Jenkins web UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control tooltips for this component.","exploit_maturity":"No public exploit","published":"2022-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-37724","description":"Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces.","exploit_maturity":"No public exploit","published":"2022-09-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34336","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229714.","exploit_maturity":"No public exploit","published":"2022-09-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-34165","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.9 are vulnerable to HTTP header injection, caused by improper validation. This could allow an attacker to conduct various attacks against the vulnerable system, including cache poisoning and cross-site scripting. IBM X-Force ID: 229429.","exploit_maturity":"No public exploit","published":"2022-09-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-36095","description":"XWiki Platform is a generic wiki platform. Prior to versions 13.10.5 and 14.3, it is possible to perform a Cross-Site Request Forgery (CSRF) attack for adding or removing tags on XWiki pages. The problem has been patched in XWiki 13.10.5 and 14.3. As a workaround, one may locally modify the `documentTags.vm` template in one's filesystem, to apply the changes exposed there.","exploit_maturity":"No public exploit","published":"2022-09-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-38752","description":"Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.","exploit_maturity":"Proof of concept only","published":"2022-09-05","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-38751","description":"Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.","exploit_maturity":"No public exploit","published":"2022-09-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-38750","description":"Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.","exploit_maturity":"No public exploit","published":"2022-09-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-38749","description":"Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.","exploit_maturity":"No public exploit","published":"2022-09-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-2764","description":"A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.","exploit_maturity":"No public exploit","published":"2022-09-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-37023","description":"Apache Geode versions prior to 1.15.0 are vulnerable to a deserialization of untrusted data flaw when using REST API on Java 8 or Java 11. Any user wishing to protect against deserialization attacks involving REST APIs should upgrade to Apache Geode 1.15 and follow the documentation for details on enabling \"validate-serializable-objects=true\" and specifying any user classes that may be serialized/deserialized with \"serializable-object-filter\". Enabling \"validate-serializable-objects\" may impact performance.","exploit_maturity":"No public exploit","published":"2022-08-31","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-36033","description":"jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which could allow XSS attacks when a reader subsequently clicks that link. If the non-default `SafeList.preserveRelativeLinks` option is enabled, HTML including `javascript:` URLs that have been crafted with control characters will not be sanitized. If the site that this HTML is published on does not set a Content Security Policy, an XSS attack is then possible. This issue is patched in jsoup 1.15.3. Users should upgrade to this version. Additionally, as the unsanitized input may have been persisted, old content should be cleaned again using the updated version. To remediate this issue without immediately upgrading: - disable `SafeList.preserveRelativeLinks`, which will rewrite input URLs as absolute URLs - ensure an appropriate [Content Security Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP) is defined. (This should be used regardless of upgrading, as a defence-in-depth best practice.)","exploit_maturity":"Proof of concept only","published":"2022-08-29","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-0225","description":"A flaw was found in Keycloak. This flaw allows a privileged attacker to use the malicious payload as the group name while creating a new group from the admin console, leading to a stored Cross-site scripting (XSS) attack.","exploit_maturity":"No public exploit","published":"2022-08-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-0207","description":"A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text.","exploit_maturity":"No public exploit","published":"2022-08-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-3856","description":"ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.","exploit_maturity":"No public exploit","published":"2022-08-26","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-3754","description":"A flaw was found in keycloak where an attacker is able to register himself with the username same as the email ID of any existing user. This may cause trouble in getting password recovery email in case the user forgets the password.","exploit_maturity":"No public exploit","published":"2022-08-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36527","description":"Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module.","exploit_maturity":"No public exploit","published":"2022-08-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-3914","description":"It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks.","exploit_maturity":"No public exploit","published":"2022-08-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-4178","description":"A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML.","exploit_maturity":"No public exploit","published":"2022-08-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-4040","description":"A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.","exploit_maturity":"No public exploit","published":"2022-08-24","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2022-38665","description":"Jenkins CollabNet Plugins Plugin 2.0.8 and earlier stores a RabbitMQ password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-38664","description":"Jenkins Job Configuration History Plugin 1165.v8cc9fd1f4597 and earlier does not escape the job name on the System Configuration History page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure job names.","exploit_maturity":"No public exploit","published":"2022-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-38663","description":"Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the Git Username and Password (`gitUsernamePassword`) credentials binding.","exploit_maturity":"No public exploit","published":"2022-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-35278","description":"In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.","exploit_maturity":"No public exploit","published":"2022-08-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-3827","description":"A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior, an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The highest threat from this vulnerability is to confidentiality and integrity.","exploit_maturity":"No public exploit","published":"2022-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-20316","description":"A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of the share.","exploit_maturity":"No public exploit","published":"2022-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-35509","description":"A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticator because of missing time stamp validations. The highest threat from this vulnerability is to data confidentiality and integrity.","exploit_maturity":"No public exploit","published":"2022-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-25075","description":"HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.","exploit_maturity":"No public exploit","published":"2022-08-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-14379","description":"A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information disclosure.","exploit_maturity":"No public exploit","published":"2022-08-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-36007","description":"Venice is a Clojure inspired sandboxed Lisp dialect with excellent Java interoperability. A partial path traversal issue exists within the functions `load-file` and `load-resource`. These functions can be limited to load files from a list of load paths. Assuming Venice has been configured with the load paths: `[ \"/Users/foo/resources\" ]` When passing **relative** paths to these two vulnerable functions everything is fine: `(load-resource \"test.png\")` =\u003e loads the file \"/Users/foo/resources/test.png\" `(load-resource \"../resources-alt/test.png\")` =\u003e rejected, outside the load path When passing **absolute** paths to these two vulnerable functions Venice may return files outside the configured load paths: `(load-resource \"/Users/foo/resources/test.png\")` =\u003e loads the file \"/Users/foo/resources/test.png\" `(load-resource \"/Users/foo/resources-alt/test.png\")` =\u003e loads the file \"/Users/foo/resources-alt/test.png\" !!! The latter call suffers from the _Partial Path Traversal_ vulnerability. This issue’s scope is limited to absolute paths whose name prefix matches a load path. E.g. for a load-path `\"/Users/foo/resources\"`, the actor can cause loading a resource also from `\"/Users/foo/resources-alt\"`, but not from `\"/Users/foo/images\"`. Versions of Venice before and including v1.10.17 are affected by this issue. Upgrade to Venice \u003e= 1.10.18, if you are on a version \u003c 1.10.18. There are currently no known workarounds.","exploit_maturity":"Proof of concept only","published":"2022-08-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-38180","description":"In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases","exploit_maturity":"No public exploit","published":"2022-08-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-38179","description":"JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack","exploit_maturity":"No public exploit","published":"2022-08-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-35697","description":"Adobe Experience Manager Core Components version 2.20.6 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires a low author privilege access.","exploit_maturity":"No public exploit","published":"2022-08-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28732","description":"A carefully crafted request on WeblogPlugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.11.3 or later.","exploit_maturity":"Forecast only","published":"2022-08-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28731","description":"A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page.","exploit_maturity":"Forecast only","published":"2022-08-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28730","description":"A carefully crafted request on AJAXPreview.jsp could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. This vulnerability leverages CVE-2021-40369, where the Denounce plugin dangerously renders user-supplied URLs. Upon re-testing CVE-2021-40369, it appears that the patch was incomplete as it was still possible to insert malicious input via the Denounce plugin. Apache JSPWiki users should upgrade to 2.11.3 or later.","exploit_maturity":"Forecast only","published":"2022-08-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27166","description":"A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.","exploit_maturity":"Forecast only","published":"2022-08-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-31190","description":"DSpace open source software is a repository application which provides durable access to digital resources. dspace-xmlui is a UI component for DSpace. In affected versions metadata on a withdrawn Item is exposed via the XMLUI \"mets.xml\" object, as long as you know the handle/URL of the withdrawn Item. This vulnerability only impacts the XMLUI. Users are advised to upgrade to version 6.4 or newer.","exploit_maturity":"No public exploit","published":"2022-08-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-31189","description":"DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. When an \"Internal System Error\" occurs in the JSPUI, then entire exception (including stack trace) is available. Information in this stacktrace may be useful to an attacker in launching a more sophisticated attack. This vulnerability only impacts the JSPUI. This issue has been fixed in version 6.4. users are advised to upgrade. Users unable to upgrade should disable the display of error messages in their internal.jsp file.","exploit_maturity":"No public exploit","published":"2022-08-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36922","description":"Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not escape the search query parameter displayed on the 'search' result page, resulting in a reflected cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36919","description":"A missing permission check in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36918","description":"Jenkins Buckminster Plugin 1.1.1 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36917","description":"A missing permission check in Jenkins Google Cloud Backup Plugin 0.6 and earlier allows attackers with Overall/Read permission to request a manual backup.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36915","description":"Jenkins Android Signing Plugin 2.2.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36914","description":"Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36913","description":"Jenkins Openstack Heat Plugin 1.5 and earlier does not perform permission checks in methods implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36912","description":"A missing permission check in Jenkins Openstack Heat Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36911","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Openstack Heat Plugin 1.5 and earlier allows attackers to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36910","description":"Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to reindex the database and to obtain information about jobs otherwise inaccessible to them.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36909","description":"A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36908","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36907","description":"A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36906","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36905","description":"Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.2 and earlier does not perform URL validation for the Repository Base URL of List maven artifact versions parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36904","description":"Jenkins Repository Connector Plugin 2.2.0 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36903","description":"A missing permission check in Jenkins Repository Connector Plugin 2.2.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36902","description":"Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape several fields of Moded Extended Choice parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36901","description":"Jenkins HTTP Request Plugin 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36898","description":"A missing permission check in Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36897","description":"A missing permission check in Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36896","description":"A missing permission check in Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36895","description":"A missing permission check in Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36894","description":"An arbitrary file write vulnerability in Jenkins CLIF Performance Testing Plugin 64.vc0d66de1dfb_f and earlier allows attackers with Overall/Read permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-36893","description":"Jenkins rpmsign-plugin Plugin 0.5.0 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36892","description":"Jenkins rhnpush-plugin Plugin 0.5.1 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36891","description":"A missing permission check in Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier allows attackers with Item/Read permission but without Deploy Now/Deploy permission to read deployment logs.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36890","description":"Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the name of files in methods implementing form validation, allowing attackers with Item/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-36888","description":"A missing permission check in Jenkins HashiCorp Vault Plugin 354.vdb_858fd6b_f48 and earlier allows attackers with Overall/Read permission to obtain credentials stored in Vault with attacker-specified path and keys.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36887","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Job Configuration History Plugin 1155.v28a_46a_cc06a_5 and earlier allows attackers to delete entries from job, agent, and system configuration history, or restore older versions of job, agent, and system configurations.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36886","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36885","description":"Jenkins GitHub Plugin 1.34.4 and earlier uses a non-constant time comparison function when checking whether the provided and computed webhook signatures are equal, allowing attackers to use statistical methods to obtain a valid webhook signature.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-36884","description":"The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an attacker-specified Git repository.","exploit_maturity":"No public exploit","published":"2022-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34112","description":"An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator.","exploit_maturity":"No public exploit","published":"2022-07-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-31160","description":"jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a label makes that parent label contents considered as the input label. Calling `.checkboxradio( \"refresh\" )` on such a widget and the initial HTML contained encoded HTML entities will make them erroneously get decoded. This can lead to potentially executing JavaScript code. The bug has been patched in jQuery UI 1.13.2. To remediate the issue, someone who can change the initial HTML can wrap all the non-input contents of the `label` in a `span`.","exploit_maturity":"Proof of concept only","published":"2022-07-20","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2022-21586","description":"Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Trade Finance accessible data as well as unauthorized access to critical data or complete access to all Oracle Banking Trade Finance accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21585","description":"Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Trade Finance accessible data as well as unauthorized access to critical data or complete access to all Oracle Banking Trade Finance accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Trade Finance. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21584","description":"Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Trade Finance accessible data as well as unauthorized access to critical data or complete access to all Oracle Banking Trade Finance accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21583","description":"Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Trade Finance accessible data as well as unauthorized update, insert or delete access to some of Oracle Banking Trade Finance accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Trade Finance. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21582","description":"Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Trade Finance accessible data as well as unauthorized access to critical data or complete access to all Oracle Banking Trade Finance accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Trade Finance. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21581","description":"Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Trade Finance accessible data as well as unauthorized read access to a subset of Oracle Banking Trade Finance accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Trade Finance. CVSS 3.1 Base Score 5.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21580","description":"Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 2.9.0.0.0, 2.9.0.1.0, 3.0.0.0.0-3.2.0.0.0 and 4.0.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Revenue Management and Billing. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Revenue Management and Billing accessible data as well as unauthorized update, insert or delete access to some of Oracle Financial Services Revenue Management and Billing accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Financial Services Revenue Management and Billing. CVSS 3.1 Base Score 5.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21579","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21578","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Universal Banking. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21577","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21576","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Universal Banking. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21575","description":"Vulnerability in the Oracle WebCenter Sites Support Tools product of Oracle Fusion Middleware (component: User Interface). The supported version that is affected is Prior to 4.4.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites Support Tools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites Support Tools accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites Support Tools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebCenter Sites Support Tools. CVSS 3.1 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21574","description":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.4.0-12.0.0.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21573","description":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care). Supported versions that are affected are 12.0.0.4.0-12.0.0.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21572","description":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care). Supported versions that are affected are 12.0.0.4.0-12.0.0.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Billing and Revenue Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Billing and Revenue Management accessible data as well as unauthorized read access to a subset of Oracle Communications Billing and Revenue Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21568","description":"Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: Access Request). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iReceivables accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21564","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21561","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). Supported versions that are affected are 9.2.6.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21560","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21559","description":"Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Platform executes to compromise Oracle Commerce Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Platform accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21557","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle WebLogic Server executes to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21551","description":"Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate). The supported version that is affected is 21c: prior to 21.7.0.0.0; 19c: prior to 19.1.0.0.220719. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle GoldenGate. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate. CVSS 3.1 Base Score 6.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21549","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21548","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21545","description":"Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Candidate Self Service Registration). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iRecruitment. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iRecruitment accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21541","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21540","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21523","description":"Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle BI Publisher accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21521","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XML Publisher). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21520","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21518","description":"Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: User Interface). Supported versions that are affected are 2.4.8.7 and 2.5.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Health Sciences Data Management Workbench. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Health Sciences Data Management Workbench accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21512","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21508","description":"Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Essbase accessible data as well as unauthorized access to critical data or complete access to all Oracle Essbase accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21428","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Universal Banking. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L).","exploit_maturity":"No public exploit","published":"2022-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-22477","description":"IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 225605.","exploit_maturity":"No public exploit","published":"2022-07-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-22473","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console data. This information could be used in further attacks against the system. IBM X-Force ID: 225347.","exploit_maturity":"No public exploit","published":"2022-07-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-32065","description":"An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file.","exploit_maturity":"No public exploit","published":"2022-07-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30187","description":"Azure Storage Library Information Disclosure Vulnerability","exploit_maturity":"Proof of concept only","published":"2022-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28889","description":"In Apache Druid 0.22.1 and earlier, the server did not set appropriate headers to prevent clickjacking. Druid 0.23.0 and later prevent clickjacking using the Content-Security-Policy header.","exploit_maturity":"No public exploit","published":"2022-07-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-44791","description":"In Apache Druid 0.22.1 and earlier, certain specially-crafted links result in unescaped URL parameters being sent back in HTML responses. This makes it possible to execute reflected XSS attacks.","exploit_maturity":"No public exploit","published":"2022-07-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-41042","description":"In Eclipse Lyo versions 1.0.0 to 4.1.0, a TransformerFactory is initialized with the defaults that do not restrict DTD loading when working with RDF/XML. This allows an attacker to cause an external DTD to be retrieved.","exploit_maturity":"No public exploit","published":"2022-07-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-5298","description":"The Google Login Plugin (versions 1.0 and 1.1) allows malicious anonymous users to authenticate successfully against Jenkins instances that are supposed to be locked down to a particular Google Apps domain through client-side request modification.","exploit_maturity":"No public exploit","published":"2022-07-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34818","description":"Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34817","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier allows attackers to disable jobs.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34816","description":"Jenkins HPE Network Virtualization Plugin 1.0 stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34815","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34814","description":"Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration page listing pending requests.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34813","description":"A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to create and delete XPath expressions.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34812","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers to create and delete XPath expressions.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34811","description":"A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to access the XPath Configuration Viewer page.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34810","description":"A missing check in Jenkins RQM Plugin 2.8 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34809","description":"Jenkins RQM Plugin 2.8 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34808","description":"Jenkins Cisco Spark Plugin 1.1.1 and earlier stores bearer tokens unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34807","description":"Jenkins Elasticsearch Query Plugin 1.2 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34806","description":"Jenkins Jigomerge Plugin 0.9 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34805","description":"Jenkins Skype notifier Plugin 1.1.0 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34804","description":"Jenkins OpsGenie Plugin 1.9 and earlier transmits API keys in plain text as part of the global Jenkins configuration form and job configuration forms, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34803","description":"Jenkins OpsGenie Plugin 1.9 and earlier stores API keys unencrypted in its global configuration file and in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission (config.xml), or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34802","description":"Jenkins RocketChat Notifier Plugin 1.5.2 and earlier stores the login password and webhook token unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34801","description":"Jenkins Build Notifications Plugin 1.5.0 and earlier transmits tokens in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34800","description":"Jenkins Build Notifications Plugin 1.5.0 and earlier stores tokens unencrypted in its global configuration files on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34799","description":"Jenkins Deployment Dashboard Plugin 1.0.10 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34798","description":"Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34797","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to connect to an attacker-specified HTTP URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34796","description":"A missing permission check in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34795","description":"Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not escape environment names on its Deployment Dashboard view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34794","description":"Missing permission checks in Jenkins Recipe Plugin 1.2 and earlier allow attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as XML.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34791","description":"Jenkins Validating Email Parameter Plugin 1.10 and earlier does not escape the name and description of its parameter type, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34790","description":"Jenkins eXtreme Feedback Panel Plugin 2.0.1 and earlier does not escape the job names used in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34789","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Matrix Reloaded Plugin 1.1.3 and earlier allows attackers to rebuild previous matrix builds.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34788","description":"Jenkins Matrix Reloaded Plugin 1.1.3 and earlier does not escape the agent name in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34787","description":"Jenkins Project Inheritance Plugin 21.04.03 and earlier does not escape the reason a build is blocked in tooltips, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to control the reason a queue item is blocked.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34786","description":"Jenkins Rich Text Publisher Plugin 1.4 and earlier does not escape the HTML message set by its post-build step, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34785","description":"Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34784","description":"Jenkins build-metrics Plugin 1.3 does not escape the build description on one of its views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Build/Update permission.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34783","description":"Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"Forecast only","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34782","description":"An incorrect permission check in Jenkins requests-plugin Plugin 2.2.16 and earlier allows attackers with Overall/Read permission to view the list of pending requests.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34781","description":"Missing permission checks in Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34780","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34779","description":"A missing permission check in Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34778","description":"Jenkins TestNG Results Plugin 554.va4a552116332 and earlier renders the unescaped test descriptions and exception messages provided in test results if certain job-level options are set, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or control test results.","exploit_maturity":"No public exploit","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34777","description":"Jenkins GitLab Plugin 1.5.34 and earlier does not escape multiple fields inserted into the description of webhook-triggered builds, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"Forecast only","published":"2022-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34305","description":"In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.","exploit_maturity":"Working exploit published","published":"2022-06-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-34298","description":"The NT auth module in OpenAM before 14.6.6 allows a \"replace Samba username attack.\"","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34213","description":"Jenkins Squash TM Publisher (Squash4Jenkins) Plugin 1.0.0 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34212","description":"A missing permission check in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34211","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers to send an HTTP POST request to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34210","description":"A missing permission check in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34209","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34208","description":"A missing permission check in Jenkins Beaker builder Plugin 1.10 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34207","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Beaker builder Plugin 1.10 and earlier allows attackers to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34206","description":"A missing permission check in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attackers with Overall/Read permission to send HTTP POST requests to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34205","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attackers to send HTTP POST requests to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34204","description":"A missing permission check in Jenkins EasyQA Plugin 1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34202","description":"Jenkins EasyQA Plugin 1.0 and earlier stores user passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34201","description":"A missing permission check in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34199","description":"Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34198","description":"Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier does not escape the name and description of Stash Branch parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34197","description":"Jenkins Sauce OnDemand Plugin 1.204 and earlier does not escape the name and description of Sauce Labs Browsers parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34196","description":"Jenkins REST List Parameter Plugin 1.5.2 and earlier does not escape the name and description of REST list parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34195","description":"Jenkins Repository Connector Plugin 2.2.0 and earlier does not escape the name and description of Maven Repository Artifact parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34194","description":"Jenkins Readonly Parameter Plugin 1.0.0 and earlier does not escape the name and description of Readonly String and Readonly Text parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34193","description":"Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34192","description":"Jenkins ontrack Jenkins Plugin 4.0.0 and earlier does not escape the name of Ontrack: Multi Parameter choice, Ontrack: Parameter choice, and Ontrack: SingleParameter parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34191","description":"Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.77 and earlier does not escape the name of NetStorm Test parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34190","description":"Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.1 and earlier does not escape the name and description of List maven artifact versions parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34189","description":"Jenkins Image Tag Parameter Plugin 1.10 and earlier does not escape the name and description of Image Tag parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34188","description":"Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34187","description":"Jenkins Filesystem List Parameter Plugin 0.0.7 and earlier does not escape the name and description of File system objects list parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34186","description":"Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape the name and description of Moded Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34185","description":"Jenkins Date Parameter Plugin 0.0.4 and earlier does not escape the name and description of Date parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34184","description":"Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34183","description":"Jenkins Agent Server Parameter Plugin 1.1 and earlier does not escape the name and description of Agent Server parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34182","description":"Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a reflected cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34178","description":"Jenkins Embeddable Build Status Plugin 2.0.3 allows specifying a 'link' query parameter that build status badges will link to, without restricting possible values, resulting in a reflected cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34176","description":"Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.","exploit_maturity":"Forecast only","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-34173","description":"In Jenkins 2.340 through 2.355 (both inclusive) the tooltip of the build button in list views supports HTML without escaping the job display name, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-34172","description":"In Jenkins 2.340 through 2.355 (both inclusive) symbol-based icons unescape previously escaped values of 'tooltip' parameters, resulting in a cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-34171","description":"In Jenkins 2.321 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the HTML output generated for new symbol-based SVG icons includes the 'title' attribute of 'l:ionicon' (until Jenkins 2.334) and 'alt' attribute of 'l:icon' (since Jenkins 2.335) without further escaping, resulting in a cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-34170","description":"In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-33113","description":"Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module.","exploit_maturity":"No public exploit","published":"2022-06-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-32549","description":"Apache Sling Commons Log \u003c= 5.4.0 and Apache Sling API \u003c= 2.25.0 are vulnerable to log injection. The ability to forge logs may allow an attacker to cover tracks by injecting fake logs and potentially corrupt log files.","exploit_maturity":"No public exploit","published":"2022-06-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-24969","description":"bypass CVE-2021-25640 \u003e In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability.","exploit_maturity":"No public exploit","published":"2022-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29770","description":"XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo.","exploit_maturity":"No public exploit","published":"2022-06-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29648","description":"A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request.","exploit_maturity":"No public exploit","published":"2022-06-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30973","description":"We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.3.","exploit_maturity":"No public exploit","published":"2022-05-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29405","description":"In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8","exploit_maturity":"No public exploit","published":"2022-05-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29237","description":"Opencast is a free and open source solution for automated video capture and distribution at scale. Prior to Opencast 10.14 and 11.7, users could pass along URLs for files belonging to organizations other than the user's own, which Opencast would then import into the current organization, bypassing organizational barriers. Attackers must have full access to Opencast's ingest REST interface, and also know internal links to resources in another organization of the same Opencast cluster. Users who do not run a multi-tenant cluster are not affected by this issue. This issue is fixed in Opencast 10.14 and 11.7.","exploit_maturity":"No public exploit","published":"2022-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-1848","description":"Business Logic Errors in GitHub repository erudika/para prior to 1.45.11.","exploit_maturity":"No public exploit","published":"2022-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-3629","description":"A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.40.Final and prior to 2.2.11.Final.","exploit_maturity":"No public exploit","published":"2022-05-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-3597","description":"A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.35.SP1, prior to 2.2.6.SP1, prior to 2.2.7.SP1, prior to 2.0.36.SP1, prior to 2.2.9.Final and prior to 2.0.39.Final.","exploit_maturity":"No public exploit","published":"2022-05-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-22365","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, with the Ajax Proxy Web Application (AjaxProxy.war) deployed, is vulnerable to spoofing by allowing a man-in-the-middle attacker to spoof SSL server hostnames. IBM X-Force ID: 220904.","exploit_maturity":"No public exploit","published":"2022-05-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-22976","description":"Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability. When using the BCrypt class with the maximum work factor (31), the encoder does not perform any salt rounds, due to an integer overflow error. The default settings are not affected by this CVE.","exploit_maturity":"No public exploit","published":"2022-05-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-1782","description":"Cross-site Scripting (XSS) - Generic in GitHub repository erudika/para prior to v1.45.11.","exploit_maturity":"No public exploit","published":"2022-05-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30970","description":"Jenkins Autocomplete Parameter Plugin 1.1 and earlier references Dropdown Autocomplete parameter and Auto Complete String parameter names in an unsafe manner from Javascript embedded in view definitions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30968","description":"Jenkins vboxwrapper Plugin 1.3 and earlier does not escape the name and description of VBox node parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30967","description":"Jenkins Selection tasks Plugin 1.0 and earlier does not escape the name and description of Script Selection task variable parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30966","description":"Jenkins Random String Parameter Plugin 1.0 and earlier does not escape the name and description of Random String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30965","description":"Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name and description of Promotion Level parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30964","description":"Jenkins Multiselect parameter Plugin 1.3 and earlier does not escape the name and description of Multiselect parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30963","description":"Jenkins JDK Parameter Plugin 1.0 and earlier does not escape the name and description of JDK parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30962","description":"Jenkins Global Variable String Parameter Plugin 1.2 and earlier does not escape the name and description of Global Variable String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30961","description":"Jenkins Autocomplete Parameter Plugin 1.1 and earlier does not escape the name of Dropdown Autocomplete and Auto Complete String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30960","description":"Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30959","description":"A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30957","description":"A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30956","description":"Jenkins Rundeck Plugin 3.6.10 and earlier does not restrict URL schemes in Rundeck webhook submissions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to submit crafted Rundeck webhook payloads.","exploit_maturity":"Forecast only","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30955","description":"Jenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30954","description":"Jenkins Blue Ocean Plugin 1.25.3 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP server.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30953","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to connect to an attacker-specified HTTP server.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30952","description":"Jenkins Pipeline SCM API for Blue Ocean Plugin 1.25.3 and earlier allows attackers with Job/Configure permission to access credentials with attacker-specified IDs stored in the private per-user credentials stores of any attacker-specified user in Jenkins.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-30949","description":"Jenkins REPO Plugin 1.14.0 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-30946","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Script Security Plugin 1158.v7c1b_73a_69a_08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-22475","description":"IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are vulnerable to identity spoofing by an authenticated user. IBM X-Force ID: 225603.","exploit_maturity":"No public exploit","published":"2022-05-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-30126","description":"In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0","exploit_maturity":"No public exploit","published":"2022-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25169","description":"The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files.","exploit_maturity":"No public exploit","published":"2022-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-23266","description":"An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the administrator.","exploit_maturity":"No public exploit","published":"2022-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-23265","description":"A logged-in and authenticated user with a Reviewer Role may lock a content item.","exploit_maturity":"No public exploit","published":"2022-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-22393","description":"IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.5 , with the adminCenter-1.0 feature configured, could allow an authenticated user to issue a request to obtain the status of HTTP/HTTPS ports which are accessible by the application server. IBM X-Force ID: 222078.","exploit_maturity":"No public exploit","published":"2022-05-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-22971","description":"In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.","exploit_maturity":"No public exploit","published":"2022-05-12","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-22970","description":"In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.","exploit_maturity":"No public exploit","published":"2022-05-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-0866","description":"This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an EJB that is configured with a RunAs principal. In particular, the org.jboss.as.ejb3.component.EJBComponent class has an incomingRunAsIdentity field. This field is used by the org.jboss.as.ejb3.security.RunAsPrincipalInterceptor to keep track of the current identity prior to switching to a new identity created using the RunAs principal. The exploit consist that the EJBComponent#incomingRunAsIdentity field is currently just a SecurityIdentity. This means in a concurrent environment, where multiple users are repeatedly invoking an EJB that is configured with a RunAs principal, it's possible for the wrong the caller principal to be returned from EJBComponent#getCallerPrincipal. Similarly, it's also possible for EJBComponent#isCallerInRole to return the wrong value. Both of these methods rely on incomingRunAsIdentity. Affects all versions of JBoss EAP from 7.1.0 and all versions of WildFly 11+ when Elytron is enabled.","exploit_maturity":"No public exploit","published":"2022-05-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-24823","description":"Netty is an open-source, asynchronous event-driven network application framework. The package `io.netty:netty-codec-http` prior to version 4.1.77.Final contains an insufficient fix for CVE-2021-21290. When Netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. This only impacts applications running on Java version 6 and lower. Additionally, this vulnerability impacts code running on Unix-like systems, and very old versions of Mac OSX and Windows as they all share the system temporary directory between all users. Version 4.1.77.Final contains a patch for this vulnerability. As a workaround, specify one's own `java.io.tmpdir` when starting the JVM or use DefaultHttpDataFactory.setBaseDir(...) to set the directory to something that is only readable by the current user.","exploit_maturity":"Proof of concept only","published":"2022-05-06","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2022-24898","description":"org.xwiki.commons:xwiki-commons-xml is a common module used by other XWiki top level projects. Starting in version 2.7 and prior to versions 12.10.10, 13.4.4, and 13.8-rc-1, it is possible for a script to access any file accessing to the user running XWiki application server with XML External Entity Injection through the XML script service. The problem has been patched in versions 12.10.10, 13.4.4, and 13.8-rc-1. There is no easy workaround for fixing this vulnerability other than upgrading and being careful when giving Script rights.","exploit_maturity":"Proof of concept only","published":"2022-04-28","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-24891","description":"ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, there is a potential for a cross-site scripting vulnerability in ESAPI caused by a incorrect regular expression for \"onsiteURL\" in the **antisamy-esapi.xml** configuration file that can cause \"javascript:\" URLs to fail to be correctly sanitized. This issue is patched in ESAPI 2.3.0.0. As a workaround, manually edit the **antisamy-esapi.xml** configuration files to change the \"onsiteURL\" regular expression. More information about remediation of the vulnerability, including the workaround, is available in the maintainers' release notes and security bulletin.","exploit_maturity":"Proof of concept only","published":"2022-04-27","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2022-24736","description":"Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis versions 7.0.0 and 6.2.7. An additional workaround to mitigate this problem without patching the redis-server executable, if Lua scripting is not being used, is to block access to `SCRIPT LOAD` and `EVAL` commands using ACL rules.","exploit_maturity":"Proof of concept only","published":"2022-04-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-41041","description":"In Eclipse Openj9 before version 0.32.0, Java 8 \u0026 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles.","exploit_maturity":"No public exploit","published":"2022-04-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-1466","description":"Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.","exploit_maturity":"No public exploit","published":"2022-04-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-26597","description":"Cross-site scripting (XSS) vulnerability in the Layout module's Open Graph integration in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the site name.","exploit_maturity":"No public exploit","published":"2022-04-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-26596","description":"Cross-site scripting (XSS) vulnerability in Journal module's web content display configuration page in Liferay Portal 7.1.0 through 7.3.3, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19, and 7.2 before fix pack 8, allows remote attackers to inject arbitrary web script or HTML via web content template names.","exploit_maturity":"No public exploit","published":"2022-04-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29577","description":"OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content. NOTE: this issue exists because of an incomplete fix for CVE-2022-28367.","exploit_maturity":"No public exploit","published":"2022-04-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-28820","description":"ACS Commons version 5.1.x (and earlier) suffers from a Reflected Cross-site Scripting (XSS) vulnerability in /apps/acs-commons/content/page-compare.html endpoint via the a and b GET parameters. User input submitted via these parameters is not validated or sanitised. An attacker must provide a link to someone with access to AEM Author, and could potentially exploit this vulnerability to inject malicious JavaScript content into vulnerable form fields and execute it within the context of the victim's browser. The exploitation of this issue requires user interaction in order to be successful.","exploit_maturity":"No public exploit","published":"2022-04-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28367","description":"OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content.","exploit_maturity":"No public exploit","published":"2022-04-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-22969","description":"\u003cIssue Description\u003e Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 Client application. A malicious user or attacker can send multiple requests initiating the Authorization Request for the Authorization Code Grant, which has the potential of exhausting system resources using a single session. This vulnerability exposes OAuth 2.0 Client applications only.","exploit_maturity":"No public exploit","published":"2022-04-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-26595","description":"Liferay Portal 7.3.7, 7.4.0, and 7.4.1, and Liferay DXP 7.2 fix pack 13, and 7.3 fix pack 2 does not properly check user permission when accessing a list of sites/groups, which allows remote authenticated users to view sites/groups via the user's site membership assignment UI.","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-26593","description":"Cross-site scripting (XSS) vulnerability in the Asset module's asset categories selector in Liferay Portal 7.3.3 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the name of a asset category.","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-21496","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21492","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server). The supported version that is affected is 5.9.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21481","description":"Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Financial Gateway). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Cash Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise FIN Cash Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN Cash Management accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise FIN Cash Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21480","description":"Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: User Interface). Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Transportation Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Transportation Management accessible data as well as unauthorized read access to a subset of Oracle Transportation Management accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21477","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload). Supported versions that are affected are 12.2.6-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data as well as unauthorized read access to a subset of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21475","description":"Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Payments accessible data as well as unauthorized read access to a subset of Oracle Banking Payments accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Payments. CVSS 3.1 Base Score 5.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21474","description":"Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Trade Finance accessible data as well as unauthorized read access to a subset of Oracle Banking Trade Finance accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Trade Finance. CVSS 3.1 Base Score 5.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21473","description":"Vulnerability in the Oracle Banking Treasury Management product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Treasury Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Treasury Management accessible data as well as unauthorized read access to a subset of Oracle Banking Treasury Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Treasury Management. CVSS 3.1 Base Score 5.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21472","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Universal Banking. CVSS 3.1 Base Score 5.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21470","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21469","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Enterprise Manager Base Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21468","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups). Supported versions that are affected are 12.2.4-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data as well as unauthorized read access to a subset of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21467","description":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Attachments). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21458","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Navigation Pages, Portal, Query). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21456","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Navigation Pages, Portal, Query). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21453","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21450","description":"Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft (component: My Links). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21448","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer). The supported version that is affected is 5.9.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21447","description":"Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft (component: Advising Notes). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Academic Advisement. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Academic Advisement accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21434","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21426","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21419","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer). Supported versions that are affected are 5.5.0.0.0 and 5.9.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21409","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). The supported version that is affected is Prior to 9.2.6.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21405","description":"Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Oracle Explorer). The supported version that is affected is 18.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where OSS Support Tools executes to compromise OSS Support Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in OSS Support Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all OSS Support Tools accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-3503","description":"A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. The highest threat from this vulnerability is to the confidentiality.","exploit_maturity":"No public exploit","published":"2022-04-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-26594","description":"Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.5 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allow remote attackers to inject arbitrary web script or HTML via a form field's help text to (1) Forms module's form builder, or (2) App Builder module's object form view's form builder.","exploit_maturity":"No public exploit","published":"2022-04-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-22968","description":"In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the field, including upper and lower case for the first character of all nested fields within the property path.","exploit_maturity":"No public exploit","published":"2022-04-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29052","description":"Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29051","description":"Missing permission checks in Jenkins Publish Over FTP Plugin 1.16 and earlier allow attackers with Overall/Read permission to connect to an FTP server using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29049","description":"Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of promotions defined in Job DSL, allowing attackers with Job/Configure permission to create a promotion with an unsafe name.","exploit_maturity":"No public exploit","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29048","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29047","description":"Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able to submit pull requests (or equivalent), but not able to commit directly to the configured SCM, to effectively change the Pipeline behavior by changing the definition of a dynamically retrieved library in their pull request, even if the Pipeline is configured to not trust them.","exploit_maturity":"No public exploit","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29046","description":"Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29045","description":"Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not escape the name and description of Promoted Build parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29044","description":"Jenkins Node and Label parameter Plugin 1.10.3 and earlier does not escape the name and description of Node and Label parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29043","description":"Jenkins Mask Passwords Plugin 3.0 and earlier does not escape the name and description of Non-Stored Password parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29042","description":"Jenkins Job Generator Plugin 1.22 and earlier does not escape the name and description of Generator Parameter and Generator Choice parameters on Job Generator jobs' Build With Parameters views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29041","description":"Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira Release Version parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29040","description":"Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29039","description":"Jenkins Gerrit Trigger Plugin 2.35.2 and earlier does not escape the name and description of Base64 Encoded String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29038","description":"Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the name and description of Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29037","description":"Jenkins CVS Plugin 2.19 and earlier does not escape the name and description of CVS Symbolic Name parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-29036","description":"Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"Forecast only","published":"2022-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-24820","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to view pages of the wiki can still list documents by rendering some velocity documents. The problem has been patched in XWiki versions 12.10.11, 13.4.4, and 13.9-rc-1. There is no known workaround for this problem.","exploit_maturity":"Proof of concept only","published":"2022-04-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-24819","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to view pages of the wiki can still list documents related to users of the wiki. The problem has been patched in XWiki versions 12.10.11, 13.4.4, and 13.9-rc-1. There is no known workaround for this problem.","exploit_maturity":"Working exploit published","published":"2022-04-08","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2022-26850","description":"When creating or updating credentials for single-user access, Apache NiFi wrote a copy of the Login Identity Providers configuration to the operating system temporary directory. On most platforms, the operating system temporary directory has global read permissions. NiFi immediately moved the temporary file to the final configuration directory, which significantly limited the window of opportunity for access. NiFi 1.16.0 includes updates to replace the Login Identity Providers configuration without writing a file to the operating system temporary directory.","exploit_maturity":"No public exploit","published":"2022-04-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-22950","description":"n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.","exploit_maturity":"No public exploit","published":"2022-04-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-28160","description":"Jenkins Tests Selector Plugin 1.3.3 and earlier allows users with Item/Configure permission to read arbitrary files on the Jenkins controller.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28159","description":"Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28158","description":"A missing permission check in Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28157","description":"Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller via FTP to an attacker-specified FTP server.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-28156","description":"Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to copy arbitrary files and directories from the Jenkins controller to the agent workspace.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-28153","description":"Jenkins SiteMonitor Plugin 0.6 and earlier does not escape URLs of sites to monitor in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28152","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to restore the default ownership of a job.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28151","description":"A missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read permission to change the owners and item-specific permissions of a job.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28149","description":"Jenkins Job and Node ownership Plugin 0.13.0 and earlier does not escape the names of the secondary owners, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28148","description":"The file browser in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Item/Read permission to obtain the contents of arbitrary files on Windows controllers.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-28147","description":"A missing permission check in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28146","description":"Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with Item/Configure permission to read arbitrary files on the Jenkins controller by specifying an input folder on the Jenkins controller as a parameter to its build steps.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-28145","description":"Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier does not apply Content-Security-Policy headers to report files it serves, resulting in a stored cross-site scripting (XSS) exploitable by attackers with Item/Configure permission or otherwise able to control report contents.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28144","description":"Jenkins Proxmox Plugin 0.7.0 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified host using attacker-specified username and password (perform a connection test), disable SSL/TLS validation for the entire Jenkins controller JVM as part of the connection test (see CVE-2022-28142), and test a rollback with attacker-specified parameters.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28143","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Proxmox Plugin 0.7.0 and earlier allows attackers to connect to an attacker-specified host using attacker-specified username and password (perform a connection test), disable SSL/TLS validation for the entire Jenkins controller JVM as part of the connection test (see CVE-2022-28142), and test a rollback with attacker-specified parameters.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28141","description":"Jenkins Proxmox Plugin 0.5.0 and earlier stores the Proxmox Datacenter password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28139","description":"A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28138","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28137","description":"A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28135","description":"Jenkins instant-messaging Plugin 1.41 and earlier stores passwords for group chats unencrypted in the global configuration file of plugins based on Jenkins instant-messaging Plugin on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28134","description":"Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to create, view, and delete BitBucket Server consumers.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-28133","description":"Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create BitBucket Server consumers.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23059","description":"A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0 via the “Manage Images” tab, which allows an attacker to upload a SVG file containing malicious JavaScript code.","exploit_maturity":"No public exploit","published":"2022-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-20323","description":"A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak.","exploit_maturity":"Working exploit published","published":"2022-03-25","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2022-27820","description":"OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not verify the TLS certificate chain of an HTTPS server.","exploit_maturity":"No public exploit","published":"2022-03-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-0862","description":"A lack of password change protection vulnerability in a depreciated API of McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker to change the password of a compromised session without knowing the existing user's password. This functionality was removed from the User Interface in ePO 10 and the API has now been disabled. Other protection is in place to reduce the likelihood of this being successful through sending a link to a logged in user.","exploit_maturity":"No public exploit","published":"2022-03-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-0859","description":"McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a local attacker to point an ePO server to an arbitrary SQL server during the restoration of the ePO server. To achieve this the attacker would have to be logged onto the server hosting the ePO server (restricted to administrators) and to know the SQL server password.","exploit_maturity":"No public exploit","published":"2022-03-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-0858","description":"A cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker to potentially obtain access to an ePO administrator's session by convincing the attacker to click on a carefully crafted link. This would lead to limited ability to alter some information in ePO due to the area of the User Interface the vulnerability is present in.","exploit_maturity":"No public exploit","published":"2022-03-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-0857","description":"A reflected cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker to potentially obtain access to an ePO administrator's session by convincing the attacker to click on a carefully crafted link. This would lead to limited access to sensitive information and limited ability to alter some information in ePO due to the area of the User Interface the vulnerability is present in.","exploit_maturity":"No public exploit","published":"2022-03-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-0842","description":"A blind SQL injection vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote authenticated attacker to potentially obtain information from the ePO database. The data obtained is dependent on the privileges the attacker has and to obtain sensitive data the attacker would require administrator privileges.","exploit_maturity":"No public exploit","published":"2022-03-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-24728","description":"CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. This problem has been patched in version 4.18.0. There are currently no known workarounds.","exploit_maturity":"No public exploit","published":"2022-03-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27218","description":"Jenkins incapptic connect uploader Plugin 1.15 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27217","description":"Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27216","description":"Jenkins dbCharts Plugin 0.5.2 and earlier stores JDBC connection passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27215","description":"A missing permission check in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27214","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27213","description":"Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27212","description":"Jenkins List Git Branches Parameter Plugin 0.0.9 and earlier does not escape the name of the 'List Git branches (and more)' parameter, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27211","description":"A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27210","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27209","description":"A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27208","description":"Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows users with Credentials/Create permission to read arbitrary files on the Jenkins controller.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-27207","description":"Jenkins global-build-stats Plugin 1.5 and earlier does not escape multiple fields in the chart configuration on the 'Global Build Stats' page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer permission.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27206","description":"Jenkins GitLab Authentication Plugin 1.13 and earlier stores the GitLab client secret unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27205","description":"A missing permission check in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27203","description":"Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Item/Configure permission to read values from arbitrary JSON and Java properties files on the Jenkins controller.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-27202","description":"Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the value and description of extended choice parameters of radio buttons or check boxes type, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27201","description":"Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-27200","description":"Jenkins Folder-based Authorization Strategy Plugin 1.3 and earlier does not escape the names of roles shown on the configuration form, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer permission.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27199","description":"A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27197","description":"Jenkins Dashboard View Plugin 2.18 and earlier does not perform URL validation for the Iframe Portlet's Iframe source URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure views.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27196","description":"Jenkins Favorite Plugin 2.4.0 and earlier does not escape the names of jobs in the favorite column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure or Item/Create permissions.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-27195","description":"Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their `build.xml` files. These values are stored unencrypted and can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-0002","description":"Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.","exploit_maturity":"No public exploit","published":"2022-03-11","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-0001","description":"Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.","exploit_maturity":"No public exploit","published":"2022-03-11","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-44667","description":"A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo parameters.","exploit_maturity":"No public exploit","published":"2022-03-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-44585","description":"A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.","exploit_maturity":"No public exploit","published":"2022-03-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-26336","description":"A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an attacker to cause an Out of Memory exception. This package is used to read TNEF files (Microsoft Outlook and Microsoft Exchange Server). If an application uses poi-scratchpad to parse TNEF files and the application allows untrusted users to supply them, then a carefully crafted file can cause an Out of Memory exception. This issue affects poi-scratchpad version 5.2.0 and prior versions. Users are recommended to upgrade to poi-scratchpad 5.2.1.","exploit_maturity":"No public exploit","published":"2022-03-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-22946","description":"In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store or trusted certificates are set will be configured to use an insecure TrustManager. This makes the gateway able to connect to remote services with invalid or custom certificates.","exploit_maturity":"No public exploit","published":"2022-03-04","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-25146","description":"The Remote App module in Liferay Portal Liferay Portal v7.4.3.4 through v7.4.3.8 and Liferay DXP 7.4 before update 5 does not check if the origin of event messages it receives matches the origin of the Remote App, allowing attackers to exfiltrate the CSRF token via a crafted event message.","exploit_maturity":"No public exploit","published":"2022-03-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23710","description":"A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview Pane (previously known as Index Pattern Preview Pane) which could allow arbitrary JavaScript to be executed in a victim’s browser.","exploit_maturity":"No public exploit","published":"2022-03-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23708","description":"A flaw was discovered in Elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the security index, allowing authenticated users with “*” index permissions access to this index.","exploit_maturity":"No public exploit","published":"2022-03-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-38269","description":"Cross-site scripting (XSS) vulnerability in the Gogo Shell module in Liferay Portal 7.1.0 through 7.3.6 and 7.4.0, and Liferay DXP 7.1 before fix pack 23, 7.2 before fix pack 13, and 7.3 before fix pack 2 allows remote attackers to inject arbitrary web script or HTML via the output of a Gogo Shell command.","exploit_maturity":"No public exploit","published":"2022-03-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-38267","description":"Cross-site scripting (XSS) vulnerability in the Blogs module's edit blog entry page in Liferay Portal 7.3.2 through 7.3.6, and Liferay DXP 7.3 before fix pack 2 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_blogs_web_portlet_BlogsAdminPortlet_title and _com_liferay_blogs_web_portlet_BlogsAdminPortlet_subtitle parameter.","exploit_maturity":"No public exploit","published":"2022-03-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-38265","description":"Cross-site scripting (XSS) vulnerability in the Asset module in Liferay Portal 7.3.4 through 7.3.6 allow remote attackers to inject arbitrary web script or HTML when creating a collection page via the _com_liferay_asset_list_web_portlet_AssetListPortlet_title parameter.","exploit_maturity":"No public exploit","published":"2022-03-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-38264","description":"Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 and 7.4.1 allows remote attackers to inject arbitrary web script or HTML into the management toolbar search via the `keywords` parameter. This issue is caused by an incomplete fix in CVE-2021-35463.","exploit_maturity":"No public exploit","published":"2022-03-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-38263","description":"Cross-site scripting (XSS) vulnerability in the Server module's script console in Liferay Portal 7.3.2 and earlier, and Liferay DXP 7.0 before fix pack 101, 7.1 before fix pack 20 and 7.2 before fix pack 10 allows remote attackers to inject arbitrary web script or HTML via the output of a script.","exploit_maturity":"No public exploit","published":"2022-03-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-3620","description":"A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.","exploit_maturity":"No public exploit","published":"2022-03-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23395","description":"jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS).","exploit_maturity":"No public exploit","published":"2022-03-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-38268","description":"The Dynamic Data Mapping module in Liferay Portal 7.0.0 through 7.3.6, and Liferay DXP 7.0 before fix pack 101, 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 2 incorrectly sets default permissions for site members, which allows remote authenticated users with the site member role to add and duplicate forms, via the UI or the API.","exploit_maturity":"No public exploit","published":"2022-03-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-24948","description":"A carefully crafted user preferences for submission could trigger an XSS vulnerability on Apache JSPWiki, related to the user preferences screen, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.11.2 or later.","exploit_maturity":"No public exploit","published":"2022-02-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-24329","description":"In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects.","exploit_maturity":"No public exploit","published":"2022-02-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-24615","description":"zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This could be used to mount a denial of service attack against services that use zip4j library.","exploit_maturity":"No public exploit","published":"2022-02-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-24614","description":"When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor library.","exploit_maturity":"No public exploit","published":"2022-02-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-24613","description":"metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library.","exploit_maturity":"No public exploit","published":"2022-02-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-39038","description":"IBM WebSphere Application Server 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 213968.","exploit_maturity":"No public exploit","published":"2022-02-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-0673","description":"A flaw was found in LemMinX in versions prior to 0.19.0. Cache poisoning of external schema files due to directory traversal.","exploit_maturity":"No public exploit","published":"2022-02-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-0672","description":"A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive information locally if LemMinX is run under a privileged user.","exploit_maturity":"No public exploit","published":"2022-02-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-2124","description":"A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.","exploit_maturity":"No public exploit","published":"2022-02-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25210","description":"Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25204","description":"Jenkins Doktor Plugin 0.4.1 and earlier implements functionality that allows agent processes to render files on the controller as Markdown or Asciidoc, and error messages allow attackers able to control agent processes to determine whether a file with a given name exists.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25203","description":"Jenkins Team Views Plugin 0.9.0 and earlier does not escape team names, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Read permission.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25202","description":"Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name of custom promotion levels, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer permission.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25201","description":"Missing permission checks in Jenkins Checkmarx Plugin 2022.1.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25197","description":"Jenkins HashiCorp Vault Plugin 336.v182c0fbaaeb7 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25196","description":"Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP Referer header as part of the URL query parameters when the authentication process starts, allowing attackers with access to Jenkins to craft a URL that will redirect users to an attacker-specified URL after logging in.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25195","description":"A missing permission check in Jenkins autonomiq Plugin 1.15 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25193","description":"Missing permission checks in Jenkins Snow Commander Plugin 1.10 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25191","description":"Jenkins Agent Server Parameter Plugin 1.0 and earlier does not escape parameter names of agent server parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25190","description":"A missing permission check in Jenkins Conjur Secrets Plugin 1.0.11 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25189","description":"Jenkins Custom Checkbox Parameter Plugin 1.1 and earlier does not escape parameter names of custom checkbox parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25188","description":"Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the appName and appVersion parameters of its Pipeline steps, allowing attackers with Item/Configure permission to write or overwrite .xml files on the Jenkins controller file system with content not controllable by the attacker.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-25187","description":"Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25186","description":"Jenkins HashiCorp Vault Plugin 3.8.0 and earlier implements functionality that allows agent processes to retrieve any Vault secrets for use on the agent, allowing attackers able to control agent processes to obtain Vault secrets for an attacker-specified path and key.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25185","description":"Jenkins Generic Webhook Trigger Plugin 1.81 and earlier does not escape the build cause when using the webhook, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25184","description":"Jenkins Pipeline: Build Step Plugin 2.15 and earlier reveals password parameter default values when generating a pipeline script using the Pipeline Snippet Generator, allowing attackers with Item/Read permission to retrieve the default password parameter value from jobs.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25180","description":"Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier includes password parameters from the original build in replayed builds, allowing attackers with Run/Replay permission to obtain the values of password parameters passed to previous builds of a Pipeline.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25179","description":"Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25178","description":"Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier does not restrict the names of resources passed to the libraryResource step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-25177","description":"Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier follows symbolic links to locations outside of the expected Pipeline library when reading files using the libraryResource step, allowing attackers able to configure Pipelines to read arbitrary files on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-25176","description":"Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers able to configure Pipelines to read arbitrary files on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23621","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with SCRIPT right can read any file located in the XWiki WAR (for example xwiki.cfg and xwiki.properties) through XWiki#invokeServletAndReturnAsString as `$xwiki.invokeServletAndReturnAsString(\"/WEB-INF/xwiki.cfg\")`. This issue has been patched in XWiki versions 12.10.9, 13.4.3 and 13.7-rc-1. Users are advised to update. The only workaround is to limit SCRIPT right.","exploit_maturity":"No public exploit","published":"2022-02-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23620","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions AbstractSxExportURLFactoryActionHandler#processSx does not escape anything from SSX document references when serializing it on filesystem, it is possible to for the HTML export process to contain reference elements containing filesystem syntax like \"../\", \"./\". or \"/\" in general. The referenced elements are not properly escaped. This issue has been resolved in version 13.6-rc-1. This issue can be worked around by limiting or disabling document export.","exploit_maturity":"No public exploit","published":"2022-02-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-23618","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions there is no protection against URL redirection to untrusted sites, in particular some well known parameters (xredirect) can be used to perform url redirections. This problem has been patched in XWiki 12.10.7 and XWiki 13.3RC1. Users are advised to update. There are no known workarounds for this issue.","exploit_maturity":"No public exploit","published":"2022-02-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23617","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right can copy the content of a page it does not have access to by using it as template of a new page. This issue has been patched in XWiki 13.2CR1 and 12.10.6. Users are advised to update. There are no known workarounds for this issue.","exploit_maturity":"No public exploit","published":"2022-02-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23615","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with SCRIPT right can save a document with the right of the current user which allow accessing API requiring programming right if the current user has programming right. This has been patched in XWiki 13.0. Users are advised to update to resolve this issue. The only known workaround is to limit SCRIPT access.","exploit_maturity":"No public exploit","published":"2022-02-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-22931","description":"Fix of CVE-2021-40525 do not prepend delimiters upon valid directory validations. Affected implementations include: - maildir mailbox store - Sieve file repository This enables a user to access other users data stores (limited to user names being prefixed by the value of the username being used).","exploit_maturity":"No public exploit","published":"2022-02-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-43841","description":"XWiki is a generic wiki platform offering runtime services for applications built on top of it. When using default XWiki configuration, it's possible for an attacker to upload an SVG containing a script executed when executing the download action on the file. This problem has been patched so that the default configuration doesn't allow to display the SVG files in the browser. Users are advised to update or to disallow uploads of SVG files.","exploit_maturity":"Proof of concept only","published":"2022-02-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-36151","description":"In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. This affects versions \u003c= 0.15.0. Users should update to version 0.16.0 which addresses this issue.","exploit_maturity":"No public exploit","published":"2022-02-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-24198","description":"iText v7.1.17 was discovered to contain an out-of-bounds exception via the component ARCFOUREncryption.encryptARCFOUR, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. NOTE: Vendor does not view this as a vulnerability and has not found it to be exploitable.","exploit_maturity":"No public exploit","published":"2022-02-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-24197","description":"iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.","exploit_maturity":"No public exploit","published":"2022-02-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-24196","description":"iText v7.1.17, up to (exluding)\": 7.1.18 and 7.2.2 was discovered to contain an out-of-memory error via the component readStreamBytesRaw, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.","exploit_maturity":"No public exploit","published":"2022-02-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-41571","description":"In Apache Pulsar it is possible to access data from BookKeeper that does not belong to the topics accessible by the authenticated user. The Admin API get-message-by-id requires the user to input a topic and a ledger id. The ledger id is a pointer to the data, and it is supposed to be a valid it for the topic. Authorisation controls are performed against the topic name and there is not proper validation the that ledger id is valid in the context of such ledger. So it may happen that the user is able to read from a ledger that contains data owned by another tenant. This issue affects Apache Pulsar Apache Pulsar version 2.8.0 and prior versions; Apache Pulsar version 2.7.3 and prior versions; Apache Pulsar version 2.6.4 and prior versions.","exploit_maturity":"No public exploit","published":"2022-02-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-22932","description":"Apache Karaf obr:* commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder. The risk is low as obr:* commands are not very used and the entry is set by user. This has been fixed in revision: https://gitbox.apache.org/repos/asf?p=karaf.git;h=36a2bc4 https://gitbox.apache.org/repos/asf?p=karaf.git;h=52b70cf Mitigation: Apache Karaf users should upgrade to 4.2.15 or 4.3.6 or later as soon as possible, or use correct path. JIRA Tickets: https://issues.apache.org/jira/browse/KARAF-7326","exploit_maturity":"No public exploit","published":"2022-01-26","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-23437","description":"There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.","exploit_maturity":"No public exploit","published":"2022-01-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-0219","description":"Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2.","exploit_maturity":"No public exploit","published":"2022-01-20","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-22310","description":"IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to JAX-WS applications. IBM X-Force ID: 217224.","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21403","description":"Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. While the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Operations Monitor. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21402","description":"Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21401","description":"Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. While the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Operations Monitor. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21400","description":"Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21399","description":"Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. While the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Operations Monitor. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21398","description":"Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21397","description":"Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21396","description":"Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21387","description":"Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Commerce Platform accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21386","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21383","description":"Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Log). Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Session Border Controller. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Enterprise Session Border Controller. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21381","description":"Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI). Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Session Border Controller. While the vulnerability is in Oracle Enterprise Session Border Controller, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Session Border Controller accessible data as well as unauthorized read access to a subset of Oracle Enterprise Session Border Controller accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21377","description":"Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web API). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2 and 20.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21376","description":"Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2 and 20.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21375","description":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21373","description":"Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Reseller Locator). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data as well as unauthorized read access to a subset of Oracle Partner Management accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21369","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21366","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21365","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21364","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21363","description":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-21361","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21360","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21359","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Optimization Framework). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21354","description":"Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iStore accessible data as well as unauthorized read access to a subset of Oracle iStore accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21353","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21350","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21349","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u321, 8u311; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21347","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21345","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21341","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"Proof of concept only","published":"2022-01-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21340","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21338","description":"Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications (component: General Framework). The supported version that is affected is 3.0.2.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Convergence. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Convergence accessible data as well as unauthorized read access to a subset of Oracle Communications Convergence accessible data. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21305","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21299","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21296","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21294","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21291","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21283","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21282","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21281","description":"Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21277","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-21272","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21269","description":"Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21262","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21261","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21260","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21259","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21258","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). The supported version that is affected is 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21257","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21252","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21246","description":"Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21244","description":"Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21243","description":"Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Primavera Portfolio Management. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21242","description":"Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35687","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Unified Metadata Manager). Supported versions that are affected are 8.0.7-8.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35686","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Unified Metadata Manager). Supported versions that are affected are 8.0.7-8.1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2022-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2022-21700","description":"Micronaut is a JVM-based, full stack Java framework designed for building JVM web applications with support for Java, Kotlin and the Groovy language. In affected versions sending an invalid Content Type header leads to memory leak in DefaultArgumentConversionContext as this type is erroneously used in static state. ### Impact Sending an invalid Content Type header leads to memory leak in `DefaultArgumentConversionContext` as this type is erroneously used in static state. ### Patches The problem is patched in Micronaut 3.2.7 and above. ### Workarounds The default content type binder can be replaced in an existing Micronaut application to mitigate the issue: ```java package example; import java.util.List; import io.micronaut.context.annotation.Replaces; import io.micronaut.core.convert.ConversionService; import io.micronaut.http.MediaType; import io.micronaut.http.bind.DefaultRequestBinderRegistry; import io.micronaut.http.bind.binders.RequestArgumentBinder; import jakarta.inject.Singleton; @Singleton @Replaces(DefaultRequestBinderRegistry.class) class FixedRequestBinderRegistry extends DefaultRequestBinderRegistry { public FixedRequestBinderRegistry(ConversionService conversionService, List\u003cRequestArgumentBinder\u003e binders) { super(conversionService, binders); } @Override protected void registerDefaultConverters(ConversionService\u003c?\u003e conversionService) { super.registerDefaultConverters(conversionService); conversionService.addConverter(CharSequence.class, MediaType.class, charSequence -\u003e { try { return MediaType.of(charSequence); } catch (IllegalArgumentException e) { return null; } }); } } ``` ### References Commit that introduced the vulnerability https://github.com/micronaut-projects/micronaut-core/commit/b8ec32c311689667c69ae7d9f9c3b3a8abc96fe3 ### For more information If you have any questions or comments about this advisory: * Open an issue in [Micronaut Core](https://github.com/micronaut-projects/micronaut-core/issues) * Email us at [info@micronaut.io](mailto:info@micronaut.io)","exploit_maturity":"No public exploit","published":"2022-01-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-42357","description":"When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be presented to the user outside the normal request flow through a XSS or phishing campaign.","exploit_maturity":"No public exploit","published":"2022-01-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23115","description":"Cross-site request forgery (CSRF) vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23113","description":"Jenkins Publish Over SSH Plugin 1.22 and earlier performs a validation of the file name specifying whether it is present or not, resulting in a path traversal vulnerability allowing attackers with Item/Configure permission to discover the name of the Jenkins controller files.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2022-23112","description":"A missing permission check in Jenkins Publish Over SSH Plugin 1.22 and earlier allows attackers with Overall/Read access to connect to an attacker-specified SSH server using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23111","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over SSH Plugin 1.22 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23110","description":"Jenkins Publish Over SSH Plugin 1.22 and earlier does not escape the SSH server name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer permission.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23109","description":"Jenkins HashiCorp Vault Plugin 3.7.0 and earlier does not mask Vault credentials in Pipeline build logs or in Pipeline step descriptions when Pipeline: Groovy Plugin 2.85 or later is installed.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23108","description":"Jenkins Badge Plugin 1.9 and earlier does not escape the description and does not check for allowed protocols when creating a badge, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23106","description":"Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-23105","description":"Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-20621","description":"Jenkins Metrics Plugin 4.0.2.8 and earlier stores an access key unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-20620","description":"Missing permission checks in Jenkins SSH Agent Plugin 1.23 and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-20618","description":"A missing permission check in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-20616","description":"Jenkins Credentials Binding Plugin 1.27 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read access to validate if a credential ID refers to a secret file credential and whether it's a zip file.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-20615","description":"Jenkins Matrix Project Plugin 1.19 and earlier does not escape HTML metacharacters in node and label names, and label descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.","exploit_maturity":"Forecast only","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-20614","description":"A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-20613","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2022-20612","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.","exploit_maturity":"No public exploit","published":"2022-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-22060","description":"In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries. This is a follow-up to CVE-2021-22096 that protects against additional types of input and in more places of the Spring Framework codebase.","exploit_maturity":"No public exploit","published":"2022-01-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-36774","description":"Apache Kylin allows users to read data from other database systems using JDBC. The MySQL JDBC driver supports certain properties, which, if left unmitigated, can allow an attacker to execute arbitrary code from a hacker-controlled malicious MySQL server within Kylin server processes. This issue affects Apache Kylin 2 version 2.6.6 and prior versions; Apache Kylin 3 version 3.1.2 and prior versions.","exploit_maturity":"No public exploit","published":"2022-01-06","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-36739","description":"The \"first name\" and \"last name\" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting (XSS) attacks.","exploit_maturity":"No public exploit","published":"2022-01-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-36738","description":"The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact","exploit_maturity":"No public exploit","published":"2022-01-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-36737","description":"The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the v3-demo-portlet.war artifact","exploit_maturity":"No public exploit","published":"2022-01-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-40111","description":"In Apache James, while fuzzing with Jazzer the IMAP parsing stack, we discover that crafted APPEND and STATUS IMAP command could be used to trigger infinite loops resulting in expensive CPU computations and OutOfMemory exceptions. This can be used for a Denial Of Service attack. The IMAP user needs to be authenticated to exploit this vulnerability. This affected Apache James prior to version 3.6.1. This vulnerability had been patched in Apache James 3.6.1 and higher. We recommend the upgrade.","exploit_maturity":"No public exploit","published":"2022-01-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-38542","description":"Apache James prior to release 3.6.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command. This can result in Man-in -the-middle command injection attacks, leading potentially to leakage of sensible information.","exploit_maturity":"No public exploit","published":"2022-01-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-4183","description":"Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file","exploit_maturity":"No public exploit","published":"2021-12-30","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-44832","description":"Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI data source names to the java protocol in Log4j2 versions 2.17.1, 2.12.4, and 2.3.2.","exploit_maturity":"Forecast only","published":"2021-12-28","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-45105","description":"Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","exploit_maturity":"Proof of concept only","published":"2021-12-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-44145","description":"In the TransformXML processor of Apache NiFi before 1.15.1 an authenticated user could configure an XSLT file which, if it included malicious external entity calls, may reveal sensitive information.","exploit_maturity":"No public exploit","published":"2021-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-34141","description":"An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is \"completely harmless.\"","exploit_maturity":"No public exploit","published":"2021-12-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-42550","description":"In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.","exploit_maturity":"No public exploit","published":"2021-12-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-35216","description":"An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.","exploit_maturity":"No public exploit","published":"2021-12-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-35215","description":"An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states.","exploit_maturity":"No public exploit","published":"2021-12-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-35210","description":"A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.","exploit_maturity":"No public exploit","published":"2021-12-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-42567","description":"Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.","exploit_maturity":"Working exploit published","published":"2021-12-07","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2021-22095","description":"In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, the Spring AMQP Message object, in its toString() method, will create a new String object from the message body, regardless of its size. This can cause an OOM Error with a large message","exploit_maturity":"No public exploit","published":"2021-11-30","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-40369","description":"A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Denounce plugin, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.11.0 or later.","exploit_maturity":"No public exploit","published":"2021-11-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-41532","description":"In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints.","exploit_maturity":"No public exploit","published":"2021-11-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-39235","description":"In Apache Ozone before 1.2.0, Ozone Datanode doesn't check the access mode parameter of the block token. Authenticated users with valid READ block token can do any write operation on the same block.","exploit_maturity":"No public exploit","published":"2021-11-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-39234","description":"In Apache Ozone versions prior to 1.2.0, Authenticated users knowing the ID of an existing block can craft specific request allowing access those blocks, bypassing other security checks like ACL.","exploit_maturity":"No public exploit","published":"2021-11-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-43576","description":"Jenkins pom2config Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers with Overall/Read and Item/Read permissions to have Jenkins parse a crafted XML file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.","exploit_maturity":"No public exploit","published":"2021-11-12","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-21701","description":"Jenkins Performance Plugin 3.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.","exploit_maturity":"No public exploit","published":"2021-11-12","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-21700","description":"Jenkins Scriptler Plugin 3.3 and earlier does not escape the name of scripts on the UI when asking to confirm their deletion, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by exploitable by attackers able to create Scriptler scripts.","exploit_maturity":"No public exploit","published":"2021-11-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21699","description":"Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic reference parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"Forecast only","published":"2021-11-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-3572","description":"A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.","exploit_maturity":"No public exploit","published":"2021-11-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-22051","description":"Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.5+, 2.2.x users should upgrade to 2.2.10.RELEASE or newer.","exploit_maturity":"No public exploit","published":"2021-11-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33611","description":"Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 (Vaadin 14.0.0 through 14.4.4) allows remote attackers to execute malicious JavaScript in browser by opening crafted URL","exploit_maturity":"No public exploit","published":"2021-11-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-41973","description":"In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater.","exploit_maturity":"No public exploit","published":"2021-11-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-22097","description":"In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, the Spring AMQP Message object, in its toString() method, will deserialize a body for a message with content type application/x-java-serialized-object. It is possible to construct a malicious java.util.Dictionary object that can cause 100% CPU usage in the application if the toString() method is called.","exploit_maturity":"No public exploit","published":"2021-10-28","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-22096","description":"In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.","exploit_maturity":"No public exploit","published":"2021-10-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-22047","description":"In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for unauthorized access depending on the Spring Security configuration.","exploit_maturity":"No public exploit","published":"2021-10-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-25219","description":"In BIND 9.3.0 -\u003e 9.11.35, 9.12.0 -\u003e 9.16.21, and versions 9.9.3-S1 -\u003e 9.11.35-S1 and 9.16.8-S1 -\u003e 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -\u003e 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.","exploit_maturity":"No public exploit","published":"2021-10-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-31835","description":"Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11 allows ePO administrators to inject arbitrary web script or HTML via a specific parameter where the administrator's entries were not correctly sanitized.","exploit_maturity":"No public exploit","published":"2021-10-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-31834","description":"Stored Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11 allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.","exploit_maturity":"No public exploit","published":"2021-10-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35666","description":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle HTTP Server accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35665","description":"Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Repository). The supported version that is affected is 11.2.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Financial Reporting. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Hyperion Financial Reporting, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hyperion Financial Reporting accessible data as well as unauthorized read access to a subset of Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35655","description":"Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affected are Prior to 11.1.2.4.046 and Prior to 21.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Essbase Administration Services. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Essbase Administration Services accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35616","description":"Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure). The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Transportation Management accessible data as well as unauthorized read access to a subset of Oracle Transportation Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"Proof of concept only","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35611","description":"Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Offline Template). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Offline. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Sales Offline. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35609","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35606","description":"Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Notification Framework). Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the PeopleSoft Enterprise CS Campus Community executes to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35601","description":"Vulnerability in the PeopleSoft Enterprise CS SA Integration Pack product of Oracle PeopleSoft (component: Students Administration). Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the PeopleSoft Enterprise CS SA Integration Pack executes to compromise PeopleSoft Enterprise CS SA Integration Pack. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS SA Integration Pack accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35595","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35586","description":"Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-35582","description":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Manager accessible data as well as unauthorized read access to a subset of Oracle Applications Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Applications Manager. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35581","description":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Manager accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35580","description":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Manager accessible data as well as unauthorized read access to a subset of Oracle Applications Manager accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35578","description":"Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-35571","description":"Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft (component: Advising Notes). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Academic Advisement. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise CS Academic Advisement accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise CS Academic Advisement accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35569","description":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35568","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35567","description":"Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via Kerberos to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-35565","description":"Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-35561","description":"Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-35559","description":"Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"Proof of concept only","published":"2021-10-20","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-35556","description":"Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"Proof of concept only","published":"2021-10-20","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2021-35554","description":"Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Trade Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35553","description":"Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Class Search). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student Records. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise CS Student Records, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise CS Student Records accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise CS Student Records accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35552","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Diagnostics). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-35541","description":"Vulnerability in the PeopleSoft Enterprise SCM product of Oracle PeopleSoft (component: Supplier Portal). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise SCM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise SCM accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise SCM accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2477","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Applications Framework. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2476","description":"Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication). The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Transportation Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2471","description":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H).","exploit_maturity":"Proof of concept only","published":"2021-10-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-2416","description":"Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications (component: Routing). Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Session Border Controller. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Communications Session Border Controller. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2414","description":"Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications (component: Routing). Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Session Border Controller. While the vulnerability is in Oracle Communications Session Border Controller, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications Session Border Controller accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-10-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-33609","description":"Missing check in DataCommunicator class in com.vaadin:vaadin-server versions 8.0.0 through 8.14.0 (Vaadin 8.0.0 through 8.14.0) allows authenticated network attacker to cause heap exhaustion by requesting too many rows of data.","exploit_maturity":"No public exploit","published":"2021-10-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-25738","description":"Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.","exploit_maturity":"No public exploit","published":"2021-10-11","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-3312","description":"An XML external entity (XXE) vulnerability in Alkacon OpenCms 11.0, 11.0.1 and 11.0.2 allows remote authenticated users with edit privileges to exfiltrate files from the server's file system by uploading a crafted SVG document.","exploit_maturity":"No public exploit","published":"2021-10-08","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-32029","description":"A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.","exploit_maturity":"No public exploit","published":"2021-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21684","description":"Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2021-10-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21683","description":"The file browser in Jenkins 2.314 and earlier, LTS 2.303.1 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Overall/Read permission (Windows controller) or Job/Workspace permission (Windows agents) to obtain the contents of arbitrary files.","exploit_maturity":"No public exploit","published":"2021-10-06","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-21682","description":"Jenkins 2.314 and earlier, LTS 2.303.1 and earlier accepts names of jobs and other entities with a trailing dot character, potentially replacing the configuration and data of other entities on Windows.","exploit_maturity":"No public exploit","published":"2021-10-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-32672","description":"Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support (3.2 or newer). The problem is fixed in versions 6.2.6, 6.0.16 and 5.0.14.","exploit_maturity":"No public exploit","published":"2021-10-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-25959","description":"In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance.","exploit_maturity":"No public exploit","published":"2021-09-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-36749","description":"In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of the Druid server process. This is not an elevation of privilege when users access Druid directly, since Druid also provides the Local InputSource, which allows the same level of access. But it is problematic when users interact with Druid indirectly through an application that allows users to specify the HTTP InputSource, but not the Local InputSource. In this case, users could bypass the application-level restriction by passing a file URL to the HTTP InputSource. This issue was previously mentioned as being fixed in 0.21.0 as per CVE-2021-26920 but was not fixed in 0.21.0 or 0.21.1.","exploit_maturity":"Working exploit published","published":"2021-09-24","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2021-38153","description":"Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnerability has been fixed. The affected versions include Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, 2.2.2, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.6.0, 2.6.1, 2.6.2, 2.7.0, 2.7.1, and 2.8.0.","exploit_maturity":"No public exploit","published":"2021-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-29842","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 205202.","exploit_maturity":"No public exploit","published":"2021-09-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-22147","description":"Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.","exploit_maturity":"No public exploit","published":"2021-09-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-21122","description":"UReport v2.2.9 contains a Server-Side Request Forgery (SSRF) in the designer page which allows attackers to detect intranet device ports.","exploit_maturity":"No public exploit","published":"2021-09-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-40824","description":"A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix SDK for Android) before 1.2.2 allows a malicious Matrix homeserver present in an encrypted room to steal room encryption keys (via crafted Matrix protocol messages) that were originally sent by affected Matrix clients participating in that room. This allows the attacker to decrypt end-to-end encrypted messages sent by affected clients.","exploit_maturity":"No public exploit","published":"2021-09-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-39194","description":"kaml is an open source implementation of the YAML format with support for kotlinx.serialization. In affected versions attackers that could provide arbitrary YAML input to an application that uses kaml could cause the application to endlessly loop while parsing the input. This could result in resource starvation and denial of service. This only affects applications that use polymorphic serialization with the default tagged polymorphism style. Applications using the property polymorphism style are not affected. YAML input for a polymorphic type that provided a tag but no value for the object would trigger the issue. Version 0.35.3 or later contain the fix for this issue.","exploit_maturity":"No public exploit","published":"2021-09-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-27578","description":"Cross Site Scripting vulnerability in markdown interpreter of Apache Zeppelin allows an attacker to inject malicious scripts. This issue affects Apache Zeppelin Apache Zeppelin versions prior to 0.9.0.","exploit_maturity":"No public exploit","published":"2021-09-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-3634","description":"A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the same, but after key re-exchange, previous session_id is kept and used as an input to new secret_hash. Historically, both of these buffers had shared length variable, which worked as long as these buffers were same. But the key re-exchange operation can also change the key exchange method, which can be based on hash of different size, eventually creating \"secret_hash\" of different size than the session_id has. This becomes an issue when the session_id memory is zeroed or when it is used again during second key re-exchange.","exploit_maturity":"No public exploit","published":"2021-08-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21681","description":"Jenkins Nomad Plugin 0.7.4 and earlier stores Docker passwords unencrypted in the global config.xml file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2021-08-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33605","description":"Improper check in CheckboxGroup in com.vaadin:vaadin-checkbox-flow versions 1.2.0 prior to 2.0.0 (Vaadin 12.0.0 prior to 14.0.0), 2.0.0 prior to 3.0.0 (Vaadin 14.0.0 prior to 14.5.0), 3.0.0 through 4.0.1 (Vaadin 15.0.0 through 17.0.11), 14.5.0 through 14.6.7 (Vaadin 14.5.0 through 14.6.7), and 18.0.0 through 20.0.5 (Vaadin 18.0.0 through 20.0.5) allows attackers to modify the value of a disabled Checkbox inside enabled CheckboxGroup component via unspecified vectors.","exploit_maturity":"No public exploit","published":"2021-08-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-39140","description":"XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose.","exploit_maturity":"No public exploit","published":"2021-08-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-32809","description":"ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Clipboard](https://ckeditor.com/cke4/addon/clipboard) package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It affects all users using the CKEditor 4 plugins listed above at version \u003e= 4.5.2. The problem has been recognized and patched. The fix will be available in version 4.16.2.","exploit_maturity":"No public exploit","published":"2021-08-12","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-3642","description":"A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.","exploit_maturity":"No public exploit","published":"2021-08-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-35463","description":"Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 allows remote attackers to inject arbitrary web script or HTML into the management toolbar search via the `keywords` parameter.","exploit_maturity":"No public exploit","published":"2021-08-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33339","description":"Cross-site scripting (XSS) vulnerability in the Fragment module in Liferay Portal 7.2.1 through 7.3.4, and Liferay DXP 7.2 before fix pack 9 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_site_admin_web_portlet_SiteAdminPortlet_name parameter.","exploit_maturity":"No public exploit","published":"2021-08-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33337","description":"Cross-site scripting (XSS) vulnerability in the Document Library module's add document menu in Liferay Portal 7.3.0 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9, allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_document_library_web_portlet_DLAdminPortlet_name parameter.","exploit_maturity":"No public exploit","published":"2021-08-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33336","description":"Cross-site scripting (XSS) vulnerability in the Journal module's add article menu in Liferay Portal 7.3.0 through 7.3.3, and Liferay DXP 7.1 fix pack 18, and 7.2 fix pack 5 through 7, allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_journal_web_portlet_JournalPortlet_name parameter.","exploit_maturity":"No public exploit","published":"2021-08-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33334","description":"The Dynamic Data Mapping module in Liferay Portal 7.0.0 through 7.3.2, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19, and 7.2 before fix pack 6, does not properly check user permissions, which allows remote attackers with the forms \"Access in Site Administration\" permission to view all forms and form entries in a site via the forms section in site administration.","exploit_maturity":"No public exploit","published":"2021-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33333","description":"The Portal Workflow module in Liferay Portal 7.3.2 and earlier, and Liferay DXP 7.0 before fix pack 93, 7.1 before fix pack 19 and 7.2 before fix pack 6, does not properly check user permission, which allows remote authenticated users to view and delete workflow submissions via crafted URLs.","exploit_maturity":"No public exploit","published":"2021-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33332","description":"Cross-site scripting (XSS) vulnerability in the Portlet Configuration module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 7, allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_portlet_configuration_css_web_portlet_PortletConfigurationCSSPortlet_portletResource parameter.","exploit_maturity":"No public exploit","published":"2021-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33331","description":"Open redirect vulnerability in the Notifications module in Liferay Portal 7.0.0 through 7.3.1, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19 and 7.2 before fix pack 8, allows remote attackers to redirect users to arbitrary external URLs via the 'redirect' parameter.","exploit_maturity":"No public exploit","published":"2021-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33330","description":"Liferay Portal 7.2.0 through 7.3.2, and Liferay DXP 7.2 before fix pack 9, allows access to Cross-origin resource sharing (CORS) protected resources if the user is only authenticated using the portal session authentication, which allows remote attackers to obtain sensitive information including the targeted user’s email address and current CSRF token.","exploit_maturity":"No public exploit","published":"2021-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33328","description":"Cross-site scripting (XSS) vulnerability in the Asset module's edit vocabulary page in Liferay Portal 7.0.0 through 7.3.4, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 20, and 7.2 before fix pack 9, allows remote attackers to inject arbitrary web script or HTML via the (1) _com_liferay_journal_web_portlet_JournalPortlet_name or (2) _com_liferay_document_library_web_portlet_DLAdminPortlet_name parameter.","exploit_maturity":"No public exploit","published":"2021-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33327","description":"The Portlet Configuration module in Liferay Portal 7.2.0 through 7.3.3, and Liferay DXP 7.0 fix pack pack 93 and 94, 7.1 fix pack 18, and 7.2 before fix pack 8, does not properly check user permission, which allows remote authenticated users to view the Guest and User role even if \"Role Visibility\" is enabled.","exploit_maturity":"No public exploit","published":"2021-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33326","description":"Cross-site scripting (XSS) vulnerability in the Frontend JS module in Liferay Portal 7.3.4 and earlier, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 20 and 7.2 before fix pack 9, allows remote attackers to inject arbitrary web script or HTML via the title of a modal window.","exploit_maturity":"No public exploit","published":"2021-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33325","description":"The Portal Workflow module in Liferay Portal 7.3.2 and earlier, and Liferay DXP 7.0 before fix pack 93, 7.1 before fix pack 19, and 7.2 before fix pack 7, user's clear text passwords are stored in the database if workflow is enabled for user creation, which allows attackers with access to the database to obtain a user's password.","exploit_maturity":"No public exploit","published":"2021-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33324","description":"The Layout module in Liferay Portal 7.1.0 through 7.3.1, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 5, does not properly check permission of pages, which allows remote authenticated users without view permission of a page to view the page via a site's page administration.","exploit_maturity":"No public exploit","published":"2021-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33320","description":"The Flags module in Liferay Portal 7.3.1 and earlier, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 20, and 7.2 before fix pack 5, does not limit the rate at which content can be flagged as inappropriate, which allows remote authenticated users to spam the site administrator with emails","exploit_maturity":"No public exploit","published":"2021-08-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-22144","description":"In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that will crash the Elasticsearch node.","exploit_maturity":"No public exploit","published":"2021-07-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-23413","description":"This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results in a returned object with a modified prototype instance.","exploit_maturity":"No public exploit","published":"2021-07-25","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2021-2462","description":"Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). Supported versions that are affected are 11.0.0, 11.1.0, 11.2.0 and 11.3.0-11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Service Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Service Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Service Center accessible data as well as unauthorized read access to a subset of Oracle Commerce Service Center accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2460","description":"Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 21.1.0.00.04. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise Oracle Application Express Data Reporter. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express Data Reporter, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Express Data Reporter accessible data as well as unauthorized read access to a subset of Oracle Application Express Data Reporter accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2457","description":"Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Request Management \u0026 Workflow). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Identity Manager accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2455","description":"Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft (component: Person Search). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Shared Components. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise HCM Shared Components accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise HCM Shared Components accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2445","description":"Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.5.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Infrastructure Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Hyperion Infrastructure Technology accessible data as well as unauthorized access to critical data or complete access to all Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2439","description":"Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization). Supported versions that are affected are 11.1.2.4 and 11.2.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion BI+. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion BI+ accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2421","description":"Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Integration and Interfaces). Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2408","description":"Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Notification Configuration). The supported version that is affected is 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PT PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PT PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2407","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2404","description":"Vulnerability in the PeopleSoft Enterprise HCM Candidate Gateway product of Oracle PeopleSoft (component: e-mail notification). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Candidate Gateway. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Candidate Gateway accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Candidate Gateway accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2403","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2401","description":"Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle BI Publisher accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"Forecast only","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2386","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 20.12.0-20.12.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2377","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2375","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). Supported versions that are affected are 9.2.5.3 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2373","description":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). Supported versions that are affected are 9.2.5.3 and Prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2368","description":"Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: Siebel Core - Server Infrastructure). Supported versions that are affected are 21.5 and Prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel CRM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2366","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 17.12.0-17.12.20, 18.8.0-18.8.23, 19.12.0-19.12.14 and 20.12.0-20.12.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. While the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2358","description":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Rest interfaces for Access Mgr). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Access Manager accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2353","description":"Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Loging). Supported versions that are affected are 21.5 and Prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel Core - Server Framework executes to compromise Siebel Core - Server Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Core - Server Framework accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2348","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2347","description":"Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Infrastructure Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hyperion Infrastructure Technology accessible data as well as unauthorized update, insert or delete access to some of Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 5.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2346","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2345","description":"Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2343","description":"Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Workflow accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-23408","description":"This affects the package com.graphhopper:graphhopper-web-bundle before 3.2, from 4.0-pre1 and before 4.0. The URL parser could be tricked into adding or modifying properties of Object.prototype using a constructor or __proto__ payload.","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-2338","description":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing Stand-Alone). Supported versions that are affected are 21.5 and Prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel Apps - Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Apps - Marketing accessible data as well as unauthorized read access to a subset of Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2324","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Loans And Deposits). Supported versions that are affected are 12.0-12.4, 14.0-14.4 and . Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2323","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Flex-Branch). Supported versions that are affected are 12.3, 12.4, 14.0-14.4 and . Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-22145","description":"A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.","exploit_maturity":"Working exploit published","published":"2021-07-21","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2021-35043","description":"OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with \u0026#00058 as the replacement for the : character.","exploit_maturity":"No public exploit","published":"2021-07-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-32014","description":"SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js.","exploit_maturity":"No public exploit","published":"2021-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-32013","description":"SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 2 of 2).","exploit_maturity":"No public exploit","published":"2021-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-32012","description":"SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 1 of 2).","exploit_maturity":"No public exploit","published":"2021-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-34429","description":"For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 \u0026 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164/GHSA-v7ff-8wcx-gmc5.","exploit_maturity":"Working exploit published","published":"2021-07-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-36374","description":"When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.","exploit_maturity":"No public exploit","published":"2021-07-14","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2021-36373","description":"When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.","exploit_maturity":"No public exploit","published":"2021-07-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-31810","description":"An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can use the PASV response to trick Net::FTP into connecting back to a given IP address and port. This potentially makes curl extract information about services that are otherwise private and not disclosed (e.g., the attacker can conduct port scans and service banner extractions).","exploit_maturity":"No public exploit","published":"2021-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-33037","description":"Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ignored the transfer encoding header if the client declared it would only accept an HTTP/1.0 response; - Tomcat honoured the identify encoding; and - Tomcat did not ensure that, if present, the chunked encoding was the final encoding.","exploit_maturity":"Forecast only","published":"2021-07-12","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-30640","description":"A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65.","exploit_maturity":"No public exploit","published":"2021-07-12","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2021-30129","description":"A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0","exploit_maturity":"No public exploit","published":"2021-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33192","description":"A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 (inclusive).","exploit_maturity":"No public exploit","published":"2021-07-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-26920","description":"In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of the Druid server process. This is not an elevation of privilege when users access Druid directly, since Druid also provides the Local InputSource, which allows the same level of access. But it is problematic when users interact with Druid indirectly through an application that allows users to specify the HTTP InputSource, but not the Local InputSource. In this case, users could bypass the application-level restriction by passing a file URL to the HTTP InputSource.","exploit_maturity":"No public exploit","published":"2021-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-32731","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Between (and including) versions 13.1RC1 and 13.1, the reset password form reveals the email address of users just by giving their username. The problem has been patched on XWiki 13.2RC1. As a workaround, it is possible to manually modify the `resetpasswordinline.vm` to perform the changes made to mitigate the vulnerability.","exploit_maturity":"No public exploit","published":"2021-07-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-32730","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A cross-site request forgery vulnerability exists in versions prior to 12.10.5, and in versions 13.0 through 13.1. It's possible for forge an URL that, when accessed by an admin, will reset the password of any user in XWiki. The problem has been patched in XWiki 12.10.5 and 13.2RC1. As a workaround, it is possible to apply the patch manually by modifying the `register_macros.vm` template.","exploit_maturity":"No public exploit","published":"2021-07-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-32729","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A vulnerability exists in versions prior to 12.6.88, 12.10.4, and 13.0. The script service method used to reset the authentication failures record can be executed by any user with Script rights and does not require Programming rights. An attacher with script rights who is able to reset the authentication failure record might perform a brute force attack, since they would be able to virtually deactivate the mechanism introduced to mitigate those attacks. The problem has been patched in version 12.6.8, 12.10.4 and 13.0. There are no workarounds aside from upgrading.","exploit_maturity":"No public exploit","published":"2021-07-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21676","description":"Jenkins requests-plugin Plugin 2.2.7 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to send test emails to an attacker-specified email address.","exploit_maturity":"No public exploit","published":"2021-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21675","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins requests-plugin Plugin 2.2.12 and earlier allows attackers to create requests and/or have administrators apply pending requests.","exploit_maturity":"No public exploit","published":"2021-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21674","description":"A missing permission check in Jenkins requests-plugin Plugin 2.2.6 and earlier allows attackers with Overall/Read permission to view the list of pending requests.","exploit_maturity":"No public exploit","published":"2021-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21673","description":"Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.","exploit_maturity":"No public exploit","published":"2021-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21672","description":"Jenkins Selenium HTML report Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.","exploit_maturity":"No public exploit","published":"2021-06-30","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-21670","description":"Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permission.","exploit_maturity":"No public exploit","published":"2021-06-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-29480","description":"Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the client side session module uses the application startup time as the signing key by default. This means that if an attacker can determine this time, and if encryption is not also used (which is recommended, but is not on by default), the session data could be tampered with by someone with the ability to write cookies. The default configuration is unsuitable for production use as an application restart renders all sessions invalid and is not multi-host compatible, but its use is not actively prevented. As of Ratpack 1.9.0, the default value is a securely randomly generated value, generated at application startup time. As a workaround, supply an alternative signing key, as per the documentation's recommendation.","exploit_maturity":"No public exploit","published":"2021-06-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33348","description":"An issue was discovered in JFinal framework v4.9.10 and below. The \"set\" method of the \"Controller\" class of jfinal framework is not strictly filtered, which will lead to XSS vulnerabilities in some cases.","exploit_maturity":"No public exploit","published":"2021-06-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-31412","description":"Improper sanitization of path in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.14 (Vaadin 10.0.0 through 10.0.18), 1.1.0 prior to 2.0.0 (Vaadin 11 prior to 14), 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), and 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows network attacker to enumerate all available routes via crafted HTTP request when application is running in production mode and no custom handler for NotFoundException is provided.","exploit_maturity":"No public exploit","published":"2021-06-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-3300","description":"It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.","exploit_maturity":"No public exploit","published":"2021-06-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21668","description":"Jenkins Scriptler Plugin 3.1 and earlier does not escape script content, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission.","exploit_maturity":"Forecast only","published":"2021-06-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21667","description":"Jenkins Scriptler Plugin 3.2 and earlier does not escape parameter names shown in job configuration forms, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission.","exploit_maturity":"Forecast only","published":"2021-06-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-31812","description":"In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.","exploit_maturity":"No public exploit","published":"2021-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-31811","description":"In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.","exploit_maturity":"No public exploit","published":"2021-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21666","description":"Jenkins Kiuwan Plugin 1.6.0 and earlier does not escape query parameters in an error message for a form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2021-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21664","description":"An incorrect permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Generic Create permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2021-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21663","description":"A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 7.5.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2021-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21662","description":"A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2021-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21661","description":"Jenkins Kubernetes CLI Plugin 1.10.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2021-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-20293","description":"A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to launch a reflected XSS attack. The highest threat from this vulnerability is to data confidentiality and integrity.","exploit_maturity":"No public exploit","published":"2021-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-29049","description":"Cross-site scripting (XSS) vulnerability in the Portal Workflow module's edit process page in Liferay DXP 7.0 before fix pack 99, 7.1 before fix pack 23, 7.2 before fix pack 12 and 7.3 before fix pack 1, allows remote attackers to inject arbitrary web script or HTML via the currentURL parameter.","exploit_maturity":"No public exploit","published":"2021-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-28169","description":"For Eclipse Jetty versions \u003c= 9.4.40, \u003c= 10.0.2, \u003c= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.","exploit_maturity":"Working exploit published","published":"2021-06-09","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-1719","description":"A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.","exploit_maturity":"No public exploit","published":"2021-06-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33880","description":"The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.","exploit_maturity":"No public exploit","published":"2021-06-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-3522","description":"GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.","exploit_maturity":"No public exploit","published":"2021-06-02","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2020-6950","description":"Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.","exploit_maturity":"Working exploit published","published":"2021-06-02","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-35510","description":"A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001. A malicious attacker could cause threads to hold up forever in the EJB server by writing a sequence of bytes corresponding to the expected messages of a successful EJB client request, but omitting the ACK messages, or just tamper with jboss-remoting code, deleting the lines that send the ACK message from the EJB client code resulting in a denial of service. The highest threat from this vulnerability is to system availability.","exploit_maturity":"No public exploit","published":"2021-06-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-14340","description":"A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.","exploit_maturity":"No public exploit","published":"2021-06-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-14317","description":"It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous Delivery (EAP-CD) introducing regression. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.","exploit_maturity":"No public exploit","published":"2021-06-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-3425","description":"A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality. Versions shipped in Red Hat AMQ 7 are vulnerable.","exploit_maturity":"No public exploit","published":"2021-06-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-3424","description":"A flaw was found in keycloak as shipped in Red Hat Single Sign-On 7.4 where IDN homograph attacks are possible. A malicious user can register himself with a name already registered and trick admin to grant him extra privileges.","exploit_maturity":"No public exploit","published":"2021-06-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-25640","description":"In Apache Dubbo prior to 2.6.9 and 2.7.9, the usage of parseURL method will lead to the bypass of white host check which can cause open redirect or SSRF vulnerability.","exploit_maturity":"No public exploit","published":"2021-06-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-20306","description":"A flaw was found in the BPMN editor in version jBPM 7.51.0.Final. Any authenticated user from any project can see the name of Ruleflow Groups from other projects, despite the user not having access to those projects. The highest threat from this vulnerability is to confidentiality.","exploit_maturity":"No public exploit","published":"2021-06-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-27826","description":"A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using Account REST API. This flaw allows an attacker to change its own NameID attribute to impersonate the admin user for any particular application.","exploit_maturity":"No public exploit","published":"2021-05-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-1729","description":"A flaw was found in SmallRye's API through version 1.6.1. The API can allow other code running within the application server to potentially obtain the ClassLoader, bypassing any permissions checks that should have been applied. The largest threat from this vulnerability is a threat to data confidentiality. This is fixed in SmallRye 1.6.2","exploit_maturity":"No public exploit","published":"2021-05-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-32643","description":"Http4s is a Scala interface for HTTP services. `StaticFile.fromUrl` can leak the presence of a directory on a server when the `URL` scheme is not `file://`, and the URL points to a fetchable resource under its scheme and authority. The function returns `F[None]`, indicating no resource, if `url.getFile` is a directory, without first checking the scheme or authority of the URL. If a URL connection to the scheme and URL would return a stream, and the path in the URL exists as a directory on the server, the presence of the directory on the server could be inferred from the 404 response. The contents and other metadata about the directory are not exposed. This affects http4s versions: 0.21.7 through 0.21.23, 0.22.0-M1 through 0.22.0-M8, 0.23.0-M1, and 1.0.0-M1 through 1.0.0-M22. The [patch](https://github.com/http4s/http4s/commit/52e1890665410b4385e37b96bc49c5e3c708e4e9) is available in the following versions: v0.21.24, v0.22.0-M9, v0.23.0-M2, v1.0.0-M23. As a workaround users can avoid calling `StaticFile.fromUrl` with non-file URLs.","exploit_maturity":"No public exploit","published":"2021-05-27","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-10688","description":"A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS attack.","exploit_maturity":"No public exploit","published":"2021-05-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-25724","description":"A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected.","exploit_maturity":"No public exploit","published":"2021-05-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-25934","description":"In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the function `createRequisitionedNode()` does not perform any validation checks on the input sent to the `node-label` parameter. Due to this flaw an attacker could inject an arbitrary script which will be stored in the database.","exploit_maturity":"No public exploit","published":"2021-05-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21660","description":"Jenkins Markdown Formatter Plugin 0.1.0 and earlier does not sanitize crafted link target URLs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with the ability to edit any description rendered using the configured markup formatter.","exploit_maturity":"No public exploit","published":"2021-05-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-33562","description":"A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, e.g., a product/insert-product-name-here.html/ref= URL.","exploit_maturity":"Working exploit published","published":"2021-05-24","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2021-33561","description":"A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when information is fetched from the backend, e.g., in admin/customers/list.html.","exploit_maturity":"Working exploit published","published":"2021-05-24","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2021-3536","description":"A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity.","exploit_maturity":"No public exploit","published":"2021-05-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-25933","description":"In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since the function `validateFormInput()` performs improper validation checks on the input sent to the `groupName` and `groupComment` parameters. Due to this flaw, an authenticated attacker could inject arbitrary script and trick other admin users into downloading malicious files which can cause severe damage to the organization using opennms.","exploit_maturity":"Proof of concept only","published":"2021-05-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-25930","description":"In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to CSRF, due to no CSRF protection, and since there is no validation of an existing user name while renaming a user. As a result, privileges of the renamed user are being overwritten by the old user and the old user is being deleted from the user list.","exploit_maturity":"Proof of concept only","published":"2021-05-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-25929","description":"In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting since there is no validation on the input being sent to the `name` parameter in `noticeWizard` endpoint. Due to this flaw an authenticated attacker could inject arbitrary script and trick other admin users into downloading malicious files.","exploit_maturity":"Proof of concept only","published":"2021-05-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-15522","description":"Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures.","exploit_maturity":"No public exploit","published":"2021-05-20","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2021-29052","description":"The Data Engine module in Liferay Portal 7.3.0 through 7.3.5, and Liferay DXP 7.3 before fix pack 1 does not check permissions in DataDefinitionResourceImpl.getSiteDataDefinitionByContentTypeByDataDefinitionKey, which allows remote authenticated users to view DDMStructures via GET API calls.","exploit_maturity":"No public exploit","published":"2021-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-29051","description":"Cross-site scripting (XSS) vulnerability in the Asset module's Asset Publisher app in Liferay Portal 7.2.1 through 7.3.5, and Liferay DXP 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_XXXXXXXXXXXX_assetEntryId parameter.","exploit_maturity":"No public exploit","published":"2021-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-29048","description":"Cross-site scripting (XSS) vulnerability in the Layout module's page administration page in Liferay Portal 7.3.4, 7.3.5 and Liferay DXP 7.2 before fix pack 11 and 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_name parameter.","exploit_maturity":"No public exploit","published":"2021-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-29046","description":"Cross-site scripting (XSS) vulnerability in the Asset module's category selector input field in Liferay Portal 7.3.5 and Liferay DXP 7.3 before fix pack 1, allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_asset_categories_admin_web_portlet_AssetCategoriesAdminPortlet_title parameter.","exploit_maturity":"No public exploit","published":"2021-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-29045","description":"Cross-site scripting (XSS) vulnerability in the Redirect module's redirection administration page in Liferay Portal 7.3.2 through 7.3.5, and Liferay DXP 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_redirect_web_internal_portlet_RedirectPortlet_destinationURL parameter.","exploit_maturity":"No public exploit","published":"2021-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-29044","description":"Cross-site scripting (XSS) vulnerability in the Site module's membership request administration pages in Liferay Portal 7.0.0 through 7.3.5, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_site_my_sites_web_portlet_MySitesPortlet_comments parameter.","exploit_maturity":"No public exploit","published":"2021-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-29043","description":"The Portal Store module in Liferay Portal 7.0.0 through 7.3.5, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 1 does not obfuscate the S3 store's proxy password, which allows attackers to steal the proxy password via man-in-the-middle attacks or shoulder surfing.","exploit_maturity":"No public exploit","published":"2021-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-29041","description":"Denial-of-service (DoS) vulnerability in the Multi-Factor Authentication module in Liferay DXP 7.3 before fix pack 1 allows remote authenticated attackers to prevent any user from authenticating by (1) enabling Time-based One-time password (TOTP) on behalf of the other user or (2) modifying the other user's TOTP shared secret.","exploit_maturity":"No public exploit","published":"2021-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-29040","description":"The JSON web services in Liferay Portal 7.3.4 and earlier, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 20 and 7.2 before fix pack 10 may provide overly verbose error messages, which allows remote attackers to use the contents of error messages to help launch another, more focused attacks via crafted inputs.","exploit_maturity":"No public exploit","published":"2021-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-29039","description":"Cross-site scripting (XSS) vulnerability in the Asset module's categories administration page in Liferay Portal 7.3.4 allows remote attackers to inject arbitrary web script or HTML via the site name.","exploit_maturity":"No public exploit","published":"2021-05-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-29506","description":"GraphHopper is an open-source Java routing engine. In GrassHopper from version 2.0 and before version 2.4, there is a regular expression injection vulnerability that may lead to Denial of Service. This has been patched in 2.4 and 3.0 See this pull request for the fix: https://github.com/graphhopper/graphhopper/pull/2304","exploit_maturity":"No public exploit","published":"2021-05-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-22137","description":"In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices.","exploit_maturity":"No public exploit","published":"2021-05-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-22135","description":"Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled on the index. Certain queries are able to enable the profiler and suggester which could lead to disclosing the existence of documents and fields the attacker should not be able to view.","exploit_maturity":"No public exploit","published":"2021-05-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-20250","description":"A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.","exploit_maturity":"No public exploit","published":"2021-05-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21654","description":"Jenkins P4 Plugin 1.11.4 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified Perforce server using attacker-specified username and password.","exploit_maturity":"No public exploit","published":"2021-05-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21653","description":"Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not perform a permission check in an HTTP endpoint, allowing with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2021-05-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21651","description":"Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obtain the list of configured profiles.","exploit_maturity":"No public exploit","published":"2021-05-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21650","description":"Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP endpoints and API models, allowing attackers with Item/Read permission to obtain information about artifacts uploaded to S3, if the optional Run/Artifacts permission is enabled.","exploit_maturity":"No public exploit","published":"2021-05-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21649","description":"Jenkins Dashboard View Plugin 2.15 and earlier does not escape URLs referenced in Image Dashboard Portlets, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.","exploit_maturity":"Forecast only","published":"2021-05-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21648","description":"Jenkins Credentials Plugin 2.3.18 and earlier does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2021-05-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-32053","description":"JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service (e.g., disable access to the database after the attack stops) via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are many simultaneous history requests.","exploit_maturity":"No public exploit","published":"2021-05-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21430","description":"OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. Using `File.createTempFile` in JDK will result in creating and using insecure temporary files that can leave application and system data vulnerable to attacks. Auto-generated code (Java, Scala) that deals with uploading or downloading binary data through API endpoints will create insecure temporary files during the process. Affected generators: `java` (jersey2, okhttp-gson (default library)), `scala-finch`. The issue has been patched with `Files.createTempFile` and released in the v5.1.0 stable version.","exploit_maturity":"No public exploit","published":"2021-05-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21429","description":"OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using `File.createTempFile` in JDK will result in creating and using insecure temporary files that can leave application and system data vulnerable to attacks. OpenAPI Generator maven plug-in creates insecure temporary files during the process. The issue has been patched with `Files.createTempFile` and released in the v5.1.0 stable version.","exploit_maturity":"No public exploit","published":"2021-04-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-31406","description":"Non-constant-time comparison of CSRF tokens in endpoint request handler in com.vaadin:flow-server versions 3.0.0 through 5.0.3 (Vaadin 15.0.0 through 18.0.6), and com.vaadin:fusion-endpoint version 6.0.0 (Vaadin 19.0.0) allows attacker to guess a security token for Fusion endpoints via timing attack.","exploit_maturity":"No public exploit","published":"2021-04-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-31404","description":"Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.13 (Vaadin 10.0.0 through 10.0.16), 1.1.0 prior to 2.0.0 (Vaadin 11 prior to 14), 2.0.0 through 2.4.6 (Vaadin 14.0.0 through 14.4.6), 3.0.0 prior to 5.0.0 (Vaadin 15 prior to 18), and 5.0.0 through 5.0.2 (Vaadin 18.0.0 through 18.0.5) allows attacker to guess a security token via timing attack.","exploit_maturity":"No public exploit","published":"2021-04-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-31403","description":"Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:vaadin-server versions 7.0.0 through 7.7.23 (Vaadin 7.0.0 through 7.7.23), and 8.0.0 through 8.12.2 (Vaadin 8.0.0 through 8.12.2) allows attacker to guess a security token via timing attack","exploit_maturity":"No public exploit","published":"2021-04-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-36319","description":"Insecure configuration of default ObjectMapper in com.vaadin:flow-server versions 3.0.0 through 3.0.5 (Vaadin 15.0.0 through 15.0.4) may expose sensitive data if the application also uses e.g. @RestController","exploit_maturity":"No public exploit","published":"2021-04-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-25028","description":"Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 (Vaadin 7.4.0 through 7.7.19), and 8.0.0 through 8.8.4 (Vaadin 8.0.0 through 8.8.4) allows attacker to inject malicious JavaScript via unspecified vector","exploit_maturity":"No public exploit","published":"2021-04-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-25027","description":"Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 (Vaadin 10.0.0 through 10.0.13), and 1.1.0 through 1.4.2 (Vaadin 11.0.0 through 13.0.5) allows attacker to execute malicious JavaScript via crafted URL","exploit_maturity":"No public exploit","published":"2021-04-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-25007","description":"Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message.","exploit_maturity":"No public exploit","published":"2021-04-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-28168","description":"Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. This is due to the use of the File.createTempFile which creates a file inside of the system temporary directory with the permissions: -rw-r--r--. Thus the contents of this file are viewable by all other users locally on the system. As such, if the contents written is security sensitive, it can be disclosed to other local users.","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2021-2315","description":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HTTP Server accessible data as well as unauthorized read access to a subset of Oracle HTTP Server accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2311","description":"Vulnerability in the Oracle Hospitality Inventory Management product of Oracle Food and Beverage Applications (component: Export to Reporting and Analytics). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Inventory Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Inventory Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2303","description":"Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Diagnostic Assistant). The supported version that is affected is Prior to 2.12.41. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise OSS Support Tools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all OSS Support Tools accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2294","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-2275","description":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2220","description":"Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: Manage Requisition Status). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise SCM eProcurement accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise SCM eProcurement accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2216","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2214","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2211","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2204","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2191","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). Supported versions that are affected are 5.5.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2163","description":"Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2021-2161","description":"Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. It can also be exploited by supplying untrusted data to APIs in the specified Component. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-2155","description":"Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2153","description":"Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Internet Expenses. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Internet Expenses accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2152","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 4.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2151","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2142","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2140","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Rules Framework). Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Analytical Applications Infrastructure, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2134","description":"Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin). The supported version that is affected is 12.2.1.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager for Fusion Middleware. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Enterprise Manager for Fusion Middleware. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2053","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). The supported version that is affected is 13.4.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Enterprise Manager Base Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data as well as unauthorized read access to a subset of Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-04-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-21647","description":"Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item/Build permission.","exploit_maturity":"No public exploit","published":"2021-04-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21645","description":"Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints, attackers with Overall/Read permission to enumerate configuration file IDs.","exploit_maturity":"No public exploit","published":"2021-04-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21644","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Config File Provider Plugin 3.7.0 and earlier allows attackers to delete configuration files corresponding to an attacker-specified ID.","exploit_maturity":"No public exploit","published":"2021-04-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21643","description":"Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2021-04-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-26074","description":"Broken Authentication in Atlassian Connect Spring Boot (ACSB) from version 1.1.0 before version 2.1.3: Atlassian Connect Spring Boot is a Java Spring Boot package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian Connect Spring Boot app occurs with a server-to-server JWT or a context JWT. Atlassian Connect Spring Boot versions from version 1.1.0 before version 2.1.3 erroneously accept context JWTs in lifecycle endpoints (such as installation) where only server-to-server JWTs should be accepted, permitting an attacker to send authenticated re-installation events to an app.","exploit_maturity":"No public exploit","published":"2021-04-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-29425","description":"In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.","exploit_maturity":"No public exploit","published":"2021-04-13","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-29429","description":"In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access information downloaded by Gradle. Some builds could be vulnerable to a local information disclosure. Remote files accessed through TextResourceFactory are downloaded into the system temporary directory first. Sensitive information contained in these files can be exposed to other local users on the same system. If you do not use the `TextResourceFactory` API, you are not vulnerable. As of Gradle 7.0, uses of the system temporary directory have been moved to the Gradle User Home directory. By default, this directory is restricted to the user running the build. As a workaround, set a more restrictive umask that removes read access to other users. When files are created in the system temporary directory, they will not be accessible to other users. If you are unable to change your system's umask, you can move the Java temporary directory by setting the System Property `java.io.tmpdir`. The new path needs to limit permissions to the build user only.","exploit_maturity":"No public exploit","published":"2021-04-12","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-3448","description":"A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.","exploit_maturity":"No public exploit","published":"2021-04-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-22513","description":"Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow access without permission checks.","exploit_maturity":"No public exploit","published":"2021-04-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-22512","description":"Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow form validation without permission checks.","exploit_maturity":"No public exploit","published":"2021-04-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-22511","description":"Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow unconditionally disabling of SSL/TLS certificates.","exploit_maturity":"No public exploit","published":"2021-04-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-22510","description":"Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects all version 6.7 and earlier versions.","exploit_maturity":"No public exploit","published":"2021-04-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-20480","description":"IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 197502.","exploit_maturity":"No public exploit","published":"2021-04-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-21641","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds.","exploit_maturity":"No public exploit","published":"2021-04-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21640","description":"Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name, allowing attackers with View/Create permission to create views with invalid or already-used names.","exploit_maturity":"No public exploit","published":"2021-04-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21639","description":"Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the `config.xml` REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type.","exploit_maturity":"No public exploit","published":"2021-04-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-28164","description":"In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.","exploit_maturity":"Working exploit published","published":"2021-04-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-28657","description":"A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.","exploit_maturity":"No public exploit","published":"2021-03-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21637","description":"A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2021-03-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21636","description":"A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2021-03-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21635","description":"Jenkins REST List Parameter Plugin 1.3.0 and earlier does not escape a parameter name reference in embedded JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2021-03-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21634","description":"Jenkins Jabber (XMPP) notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2021-03-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21632","description":"A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2021-03-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21631","description":"Jenkins Cloud Statistics Plugin 0.26 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission and knowledge of random activity IDs to view related provisioning exception error messages.","exploit_maturity":"No public exploit","published":"2021-03-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21630","description":"Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"Forecast only","published":"2021-03-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21628","description":"Jenkins Build With Parameters Plugin 1.5 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"Forecast only","published":"2021-03-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21409","description":"Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026 clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that enables request smuggling. The content-length header is not correctly validated if the request only uses a single Http2HeaderFrame with the endStream set to to true. This could lead to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1. This is a followup of GHSA-wm47-8v5p-wjpj/CVE-2021-21295 which did miss to fix this one case. This was fixed as part of 4.1.61.Final.","exploit_maturity":"No public exploit","published":"2021-03-30","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2021-23890","description":"Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows an unauthenticated user to download McAfee product packages (specifically McAfee Agent) available in ePO repository and install them on their own machines to have it managed and then in turn get policy details from the ePO server. This can only happen when the ePO Agent Handler is installed in a Demilitarized Zone (DMZ) to service machines not connected to the network through a VPN.","exploit_maturity":"No public exploit","published":"2021-03-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-23889","description":"Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.","exploit_maturity":"No public exploit","published":"2021-03-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-23888","description":"Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user to load an untrusted site in an ePO iframe which could steal information from the authenticated user.","exploit_maturity":"No public exploit","published":"2021-03-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-20289","description":"A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.","exploit_maturity":"No public exploit","published":"2021-03-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-28100","description":"Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the local filesystem can read anything written there by the Priam process.","exploit_maturity":"No public exploit","published":"2021-03-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-28099","description":"In Netflix OSS Hollow, since the Files.exists(parent) is run before creating the directories, an attacker can pre-create these directories with wide permissions. Additionally, since an insecure source of randomness is used, the file names to be created can be deterministically calculated.","exploit_maturity":"No public exploit","published":"2021-03-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-27906","description":"A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.","exploit_maturity":"No public exploit","published":"2021-03-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-27807","description":"A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.","exploit_maturity":"No public exploit","published":"2021-03-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21626","description":"Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents.","exploit_maturity":"No public exploit","published":"2021-03-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21625","description":"Jenkins CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in Jenkins in some circumstances.","exploit_maturity":"No public exploit","published":"2021-03-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21624","description":"An incorrect permission check in Jenkins Role-based Authorization Strategy Plugin 3.1 and earlier allows attackers with Item/Read permission on nested items to access them, even if they lack Item/Read permission for parent folders.","exploit_maturity":"No public exploit","published":"2021-03-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21623","description":"An incorrect permission check in Jenkins Matrix Authorization Strategy Plugin 2.6.5 and earlier allows attackers with Item/Read permission on nested items to access them, even if they lack Item/Read permission for parent folders.","exploit_maturity":"No public exploit","published":"2021-03-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-1926","description":"Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of another users cookie signature. The issue was addressed in Apache Hive 2.3.8","exploit_maturity":"No public exploit","published":"2021-03-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-28363","description":"The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted.","exploit_maturity":"No public exploit","published":"2021-03-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21364","description":"swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary directory is shared between all local users. When files/directories are created, the default `umask` settings for the process are respected. As a result, by default, most processes/apis will create files/directories with the permissions `-rw-r--r--` and `drwxr-xr-x` respectively, unless an API that explicitly sets safe file permissions is used. Because this vulnerability impacts generated code, the generated code will remain vulnerable until fixed manually! This vulnerability is fixed in version 2.4.19. Note this is a distinct vulnerability from CVE-2021-21363.","exploit_maturity":"No public exploit","published":"2021-03-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-5016","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. When application security is disabled and JAX-RPC applications are present, an attacker could send a specially-crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary xml files on the system. This does not occur if Application security is enabled. IBM X-Force ID: 193556.","exploit_maturity":"No public exploit","published":"2021-03-10","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-13959","description":"The default error page for VelocityView in Apache Velocity Tools prior to 3.1 reflects back the vm file that was entered as part of the URL. An attacker can set an XSS payload file as this vm file in the URL which results in this payload being executed. XSS vulnerabilities allow attackers to execute arbitrary JavaScript in the context of the attacked website and the attacked user. This can be abused to steal session cookies, perform requests in the name of the victim or for phishing attacks.","exploit_maturity":"No public exploit","published":"2021-03-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21361","description":"The `com.bmuschko:gradle-vagrant-plugin` Gradle plugin contains an information disclosure vulnerability due to the logging of the system environment variables. When this Gradle plugin is executed in public CI/CD, this can lead to sensitive credentials being exposed to malicious actors. This is fixed in version 3.0.0.","exploit_maturity":"No public exploit","published":"2021-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21295","description":"Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026 clients. In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final there is a vulnerability that enables request smuggling. If a Content-Length header is present in the original HTTP/2 request, the field is not validated by `Http2MultiplexHandler` as it is propagated up. This is fine as long as the request is not proxied through as HTTP/1.1. If the request comes in as an HTTP/2 stream, gets converted into the HTTP/1.1 domain objects (`HttpRequest`, `HttpContent`, etc.) via `Http2StreamFrameToHttpObjectCodec `and then sent up to the child channel's pipeline and proxied through a remote peer as HTTP/1.1 this may result in request smuggling. In a proxy case, users may assume the content-length is validated somehow, which is not the case. If the request is forwarded to a backend channel that is a HTTP/1.1 connection, the Content-Length now has meaning and needs to be checked. An attacker can smuggle requests inside the body as it gets downgraded from HTTP/2 to HTTP/1.1. For an example attack refer to the linked GitHub Advisory. Users are only affected if all of this is true: `HTTP2MultiplexCodec` or `Http2FrameCodec` is used, `Http2StreamFrameToHttpObjectCodec` is used to convert to HTTP/1.1 objects, and these HTTP/1.1 objects are forwarded to another remote peer. This has been patched in 4.1.60.Final As a workaround, the user can do the validation by themselves by implementing a custom `ChannelInboundHandler` that is put in the `ChannelPipeline` behind `Http2StreamFrameToHttpObjectCodec`.","exploit_maturity":"No public exploit","published":"2021-03-09","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2021-20262","description":"A flaw was found in Keycloak 12.0.0 where re-authentication does not occur while updating the password. This flaw allows an attacker to take over an account if they can obtain temporary, physical access to a user’s browser. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.","exploit_maturity":"No public exploit","published":"2021-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-22134","description":"A document disclosure flaw was found in Elasticsearch versions after 7.6.0 and before 7.11.0 when Document or Field Level Security is used. Get requests do not properly apply security permissions when executing a query against a recently updated document. This affects documents that have been updated and not yet refreshed in the index. This could result in the search disclosing the existence of documents and fields the attacker should not be able to view.","exploit_maturity":"No public exploit","published":"2021-03-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-27838","description":"A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.","exploit_maturity":"Working exploit published","published":"2021-03-08","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-1936","description":"A cross-site scripting issue was found in Apache Ambari Views. This was addressed in Apache Ambari 2.7.4.","exploit_maturity":"No public exploit","published":"2021-03-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-22114","description":"Addresses partial fix in CVE-2018-1263. Spring-integration-zip, versions prior to 1.0.4, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.","exploit_maturity":"No public exploit","published":"2021-03-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-27223","description":"In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high CPU usage processing those quality values, resulting in minutes of CPU time exhausted processing those quality values.","exploit_maturity":"Forecast only","published":"2021-02-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-20328","description":"Specific versions of the Java driver that support client-side field level encryption (CSFLE) fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffic between the Java driver and the KMS service rendering Field Level Encryption ineffective. This issue was discovered during internal testing and affects all versions of the Java driver that support CSFLE. The Java async, Scala, and reactive streams drivers are not impacted. This vulnerability does not impact driver traffic payloads with CSFLE-supported key services originating from applications residing inside the AWS, GCP, and Azure network fabrics due to compensating controls in these environments. This issue does not impact driver workloads that don’t use Field Level Encryption.","exploit_maturity":"No public exploit","published":"2021-02-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21622","description":"Jenkins Artifact Repository Parameter Plugin 1.0.0 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2021-02-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21621","description":"Jenkins Support Core Plugin 2.72 and earlier provides the serialized user authentication as part of the \"About user (basic authentication details only)\" information, which can include the session ID of the user creating the support bundle in some configurations.","exploit_maturity":"No public exploit","published":"2021-02-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21620","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to change claims.","exploit_maturity":"No public exploit","published":"2021-02-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21619","description":"Jenkins Claim Plugin 2.18.1 and earlier does not escape the user display name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers who are able to control the display names of Jenkins users, either via the security realm, or directly inside Jenkins.","exploit_maturity":"No public exploit","published":"2021-02-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21618","description":"Jenkins Repository Connector Plugin 2.0.2 and earlier does not escape parameter names and descriptions for past builds, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","exploit_maturity":"Forecast only","published":"2021-02-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21616","description":"Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"Forecast only","published":"2021-02-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-27568","description":"An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.","exploit_maturity":"No public exploit","published":"2021-02-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-22113","description":"Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassing the “Sensitive Headers” restriction when executing requests with specially constructed URLs. Applications that use Spring Security's StrictHttpFirewall (enabled by default for all URLs) are not affected by the vulnerability, as they reject requests that allow bypassing.","exploit_maturity":"No public exploit","published":"2021-02-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-20220","description":"A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.","exploit_maturity":"No public exploit","published":"2021-02-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-13697","description":"An issue was discovered in RouterNanoHTTPD.java in NanoHTTPD through 2.3.1. The GeneralHandler class implements a basic GET handler that prints debug information as an HTML page. Any web server that extends this class without implementing its own GET handler is vulnerable to reflected XSS, because the GeneralHandler GET handler prints user input passed through the query string without any sanitization.","exploit_maturity":"No public exploit","published":"2021-02-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-26544","description":"Livy server version 0.7.0-incubating (only) is vulnerable to a cross site scripting issue in the session name. A malicious user could use this flaw to access logs and results of other users' sessions and run jobs with their privileges. This issue is fixed in Livy 0.7.1-incubating.","exploit_maturity":"No public exploit","published":"2021-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-12668","description":"Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure.","exploit_maturity":"No public exploit","published":"2021-02-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-23339","description":"This affects all versions before 10.1.14 and from 10.2.0 to 10.2.4 of package com.typesafe.akka:akka-http-core. It allows multiple Transfer-Encoding headers.","exploit_maturity":"No public exploit","published":"2021-02-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-28500","description":"Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.","exploit_maturity":"No public exploit","published":"2021-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-7021","description":"Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit_request_body option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication tokens. This could allow an Elasticsearch administrator to view these details.","exploit_maturity":"No public exploit","published":"2021-02-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21290","description":"Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026 clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method \"File.createTempFile\" on unix-like systems creates a random file, but, by default will create this file with the permissions \"-rw-r--r--\". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's \"AbstractDiskHttpData\" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own \"java.io.tmpdir\" when you start the JVM or use \"DefaultHttpDataFactory.setBaseDir(...)\" to set the directory to something that is only readable by the current user.","exploit_maturity":"No public exploit","published":"2021-02-08","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-13947","description":"An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.","exploit_maturity":"Forecast only","published":"2021-02-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-23331","description":"This affects all versions of package com.squareup:connect. The method prepareDownloadFilecreates creates a temporary file with the permissions bits of -rw-r--r-- on unix-like systems. On unix-like systems, the system temporary directory is shared between users. As such, the contents of the file downloaded by downloadFileFromResponse will be visible to all other users on the local system. A workaround fix for this issue is to set the system property java.io.tmpdir to a safe directory as remediation. Note: This version of the SDK is end of life and no longer maintained, please upgrade to the latest version.","exploit_maturity":"No public exploit","published":"2021-02-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-29582","description":"In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.","exploit_maturity":"No public exploit","published":"2021-02-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21043","description":"ACS Commons version 4.9.2 (and earlier) suffers from a Reflected Cross-site Scripting (XSS) vulnerability in version-compare and page-compare due to invalid JCR characters that are not handled correctly. An attacker could potentially exploit this vulnerability to inject malicious JavaScript content into vulnerable form fields and execute it within the context of the victim's browser. Exploitation of this issue requires user interaction in order to be successful.","exploit_maturity":"No public exploit","published":"2021-02-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-1725","description":"A flaw was found in keycloak before version 13.0.0. In some scenarios a user still has access to a resource after changing the role mappings in Keycloak and after expiration of the previous access token.","exploit_maturity":"No public exploit","published":"2021-01-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-5428","description":"In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.","exploit_maturity":"No public exploit","published":"2021-01-27","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2021-26271","description":"It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).","exploit_maturity":"No public exploit","published":"2021-01-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-21615","description":"Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-check to time-of-use (TOCTOU) race condition.","exploit_maturity":"No public exploit","published":"2021-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21275","description":"The MediaWiki \"Report\" extension has a Cross-Site Request Forgery (CSRF) vulnerability. Before fixed version, there was no protection against CSRF checks on Special:Report, so requests to report a revision could be forged. The problem has been fixed in commit f828dc6 by making use of MediaWiki edit tokens.","exploit_maturity":"No public exploit","published":"2021-01-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-3137","description":"XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-2117","description":"Vulnerability in the Oracle Application Express Survey Builder component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise Oracle Application Express Survey Builder. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express Survey Builder, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Express Survey Builder accessible data as well as unauthorized read access to a subset of Oracle Application Express Survey Builder accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2116","description":"Vulnerability in the Oracle Application Express Opportunity Tracker component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise Oracle Application Express Opportunity Tracker. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express Opportunity Tracker, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Express Opportunity Tracker accessible data as well as unauthorized read access to a subset of Oracle Application Express Opportunity Tracker accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2113","description":"Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: On Demand Billing). Supported versions that are affected are 2.9.0.0 and 2.9.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Revenue Management and Billing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Revenue Management and Billing accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2110","description":"Vulnerability in the Oracle Argus Safety product of Oracle Health Sciences Applications (component: Letters). The supported version that is affected is 8.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety. While the vulnerability is in Oracle Argus Safety, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Argus Safety accessible data. CVSS 3.1 Base Score 5.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2059","description":"Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Web interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iStore accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2057","description":"Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Internal Operations). The supported version that is affected is 19.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Customer Management and Segmentation Foundation accessible data as well as unauthorized read access to a subset of Oracle Retail Customer Management and Segmentation Foundation accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Customer Management and Segmentation Foundation. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2052","description":"Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). The supported version that is affected is Prior to 9.2.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Orchestrator. While the vulnerability is in JD Edwards EnterpriseOne Orchestrator, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of JD Edwards EnterpriseOne Orchestrator accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2044","description":"Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Financial Sanctions). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Payables. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Payables accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2043","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2040","description":"Vulnerability in the Oracle Argus Safety product of Oracle Health Sciences Applications (component: Case Form, Local Affiliate Form). The supported version that is affected is 8.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Argus Safety. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Argus Safety, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Argus Safety accessible data as well as unauthorized read access to a subset of Oracle Argus Safety accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2033","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2023","description":"Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Installed Base, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2017","description":"Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle User Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle User Management accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2005","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2004","description":"Vulnerability in the Siebel Core - Server BizLogic Script product of Oracle Siebel CRM (component: Integration - Scripting). Supported versions that are affected are 20.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core - Server BizLogic Script. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Core - Server BizLogic Script accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-2003","description":"Vulnerability in the Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Dashboards). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-1999","description":"Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS subsystems). The supported version that is affected is 8.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle ZFS Storage Appliance Kit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle ZFS Storage Appliance Kit accessible data. CVSS 3.1 Base Score 5.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-1995","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2021-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2021-24122","description":"When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to JSP source code disclosure in some configurations. The root cause was the unexpected behaviour of the JRE API File.getCanonicalPath() which in turn was caused by the inconsistent behaviour of the Windows API (FindFirstFileW) in some circumstances.","exploit_maturity":"No public exploit","published":"2021-01-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-22132","description":"Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure flaw in the async search API. Users who execute an async search will improperly store the HTTP headers. An Elasticsearch user with the ability to read the .tasks index could obtain sensitive request headers of other users in the cluster. This issue is fixed in Elasticsearch 7.10.2","exploit_maturity":"No public exploit","published":"2021-01-14","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-27219","description":"In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from the given URL unescaped to the client.","exploit_maturity":"No public exploit","published":"2021-01-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21614","description":"Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2021-01-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21613","description":"Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to control TICS service response content.","exploit_maturity":"No public exploit","published":"2021-01-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21612","description":"Jenkins TraceTronic ECU-TEST Plugin 2.23.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2021-01-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21611","description":"Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape display names and IDs of item types shown on the New Item page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to specify display names or IDs of item types.","exploit_maturity":"No public exploit","published":"2021-01-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21609","description":"Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not correctly match requested URLs to the list of always accessible paths, allowing attackers without Overall/Read permission to access some URLs as if they did have Overall/Read permission.","exploit_maturity":"No public exploit","published":"2021-01-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21608","description":"Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape button labels in the Jenkins UI, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with the ability to control button labels.","exploit_maturity":"No public exploit","published":"2021-01-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21607","description":"Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.","exploit_maturity":"No public exploit","published":"2021-01-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21606","description":"Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML files with a short path.","exploit_maturity":"No public exploit","published":"2021-01-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21603","description":"Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape notification bar response contents, resulting in a cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2021-01-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2021-21602","description":"Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks.","exploit_maturity":"No public exploit","published":"2021-01-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-25657","description":"A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.","exploit_maturity":"No public exploit","published":"2021-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-13922","description":"Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.","exploit_maturity":"No public exploit","published":"2021-01-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-25476","description":"Liferay CMS Portal version 7.1.3 and 7.2.1 have a blind persistent cross-site scripting (XSS) vulnerability in the user name parameter to Calendar. An attacker can insert the malicious payload on the username, lastname or surname fields of its own profile, and the malicious payload will be injected and reflected in the calendar of the user who submitted the payload. An attacker could escalate its privileges in case an admin visits the calendar that injected the payload.","exploit_maturity":"No public exploit","published":"2021-01-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-35774","description":"server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint.","exploit_maturity":"Working exploit published","published":"2020-12-29","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-29204","description":"XXL-JOB 2.2.0 allows Stored XSS (in Add User) to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java.","exploit_maturity":"No public exploit","published":"2020-12-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-35497","description":"A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and public SSH key.","exploit_maturity":"No public exploit","published":"2020-12-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-5359","description":"Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to modify and corrupt the encrypted data.","exploit_maturity":"No public exploit","published":"2020-12-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-26259","description":"XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling. The vulnerability may allow a remote attacker to delete arbitrary know files on the host as log as the executing process has sufficient rights only by manipulating the processed input stream. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.15. The reported vulnerability does not exist running Java 15 or higher. No user is affected, who followed the recommendation to setup XStream's Security Framework with a whitelist! Anyone relying on XStream's default blacklist can immediately switch to a whilelist for the allowed types to avoid the vulnerability. Users of XStream 1.4.14 or below who still want to use XStream default blacklist can use a workaround described in more detailed in the referenced advisories.","exploit_maturity":"Proof of concept only","published":"2020-12-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-14302","description":"A flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful authentication, redirects to a Keycloak endpoint that accepts multiple invocations with the use of the same \"state\" parameter. This flaw allows a malicious user to perform replay attacks.","exploit_maturity":"No public exploit","published":"2020-12-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-10770","description":"A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_uri. This flaw allows an attacker to use this parameter to execute a Server-side request forgery (SSRF) attack.","exploit_maturity":"Working exploit published","published":"2020-12-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-35460","description":"common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.","exploit_maturity":"No public exploit","published":"2020-12-14","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-27822","description":"A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability.","exploit_maturity":"No public exploit","published":"2020-12-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-26234","description":"Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for man-in-the-middle attacks. This problem is fixed in Opencast 7.9 and Opencast 8.8 Please be aware that fixing the problem means that Opencast will not simply accept any self-signed certificates any longer without properly importing them. If you need those, please make sure to import them into the Java key store. Better yet, get a valid certificate.","exploit_maturity":"No public exploit","published":"2020-12-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-17521","description":"Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Users not using the extension methods mentioned in the advisory are not affected, but may wish to read the advisory for further details. Versions Affected: 2.0 to 2.4.20, 2.5.0 to 2.5.13, 3.0.0 to 3.0.6, and 4.0.0-alpha-1. Fixed in versions 2.4.21, 2.5.14, 3.0.7, 4.0.0-alpha-2.","exploit_maturity":"No public exploit","published":"2020-12-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-25711","description":"A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server without the ADMIN role.","exploit_maturity":"No public exploit","published":"2020-12-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2323","description":"Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers with Overall/Read permission to access the Chaos Monkey page and to see the history of actions.","exploit_maturity":"No public exploit","published":"2020-12-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-27218","description":"In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.","exploit_maturity":"No public exploit","published":"2020-11-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-15686","description":"Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users’ cookies.","exploit_maturity":"No public exploit","published":"2020-11-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-15682","description":"In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.","exploit_maturity":"No public exploit","published":"2020-11-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-15680","description":"In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data.","exploit_maturity":"No public exploit","published":"2020-11-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-25640","description":"A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.","exploit_maturity":"No public exploit","published":"2020-11-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-4788","description":"IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296.","exploit_maturity":"No public exploit","published":"2020-11-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-10776","description":"A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri parameter. This flaw allows an attacker to perform a Cross-site scripting attack.","exploit_maturity":"No public exploit","published":"2020-11-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-13954","description":"By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack via the styleSheetPath, which allows a malicious actor to inject javascript into the web page. This vulnerability affects all versions of Apache CXF prior to 3.4.1 and 3.3.8. Please note that this is a separate issue to CVE-2019-17573.","exploit_maturity":"No public exploit","published":"2020-11-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2319","description":"Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier stores a password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2020-11-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2318","description":"Jenkins Mail Commander Plugin for Jenkins-ci Plugin 1.0.0 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2020-11-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2317","description":"Jenkins FindBugs Plugin 5.0.0 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide report files to Jenkins FindBugs Plugin's post build step.","exploit_maturity":"No public exploit","published":"2020-11-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2316","description":"Jenkins Static Analysis Utilities Plugin 1.96 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2020-11-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2315","description":"Jenkins Visualworks Store Plugin 1.1.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.","exploit_maturity":"No public exploit","published":"2020-11-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2314","description":"Jenkins AppSpider Plugin 1.0.12 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2020-11-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2313","description":"A missing permission check in Jenkins Azure Key Vault Plugin 2.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2020-11-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2312","description":"Jenkins SQLPlus Script Runner Plugin 2.0.12 and earlier does not mask a password provided as command line argument in build logs.","exploit_maturity":"No public exploit","published":"2020-11-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2311","description":"A missing permission check in Jenkins AWS Global Configuration Plugin 1.5 and earlier allows attackers with Overall/Read permission to replace the global AWS configuration.","exploit_maturity":"No public exploit","published":"2020-11-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2310","description":"Missing permission checks in Jenkins Ansible Plugin 1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2020-11-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2306","description":"A missing permission check in Jenkins Mercurial Plugin 2.11 and earlier allows attackers with Overall/Read permission to obtain a list of names of configured Mercurial installations.","exploit_maturity":"No public exploit","published":"2020-11-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2305","description":"Jenkins Mercurial Plugin 2.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.","exploit_maturity":"No public exploit","published":"2020-11-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2304","description":"Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.","exploit_maturity":"No public exploit","published":"2020-11-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2303","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Active Directory Plugin 2.19 and earlier allows attackers to perform connection tests, connecting to attacker-specified or previously configured Active Directory servers using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2020-11-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2302","description":"A missing permission check in Jenkins Active Directory Plugin 2.19 and earlier allows attackers with Overall/Read permission to access the domain health check diagnostic page.","exploit_maturity":"No public exploit","published":"2020-11-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-26939","description":"In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensitive information about a private exponent because of Observable Differences in Behavior to Error Inputs. This occurs in org.bouncycastle.crypto.encodings.OAEPEncoding. Sending invalid ciphertext that decrypts to a short payload in the OAEP Decoder could result in the throwing of an early exception, potentially leaking some information about the private exponent of the RSA private key performing the encryption.","exploit_maturity":"No public exploit","published":"2020-11-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-25689","description":"A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue, leading to a denial of service. The highest threat from this vulnerability is to system availability.","exploit_maturity":"No public exploit","published":"2020-11-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-4782","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system.","exploit_maturity":"No public exploit","published":"2020-10-28","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-14900","description":"Vulnerability in the Oracle Application Express Group Calendar component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise Oracle Application Express Group Calendar. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express Group Calendar, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Express Group Calendar accessible data as well as unauthorized read access to a subset of Oracle Application Express Group Calendar accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14899","description":"Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise Oracle Application Express Data Reporter. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express Data Reporter, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Express Data Reporter accessible data as well as unauthorized read access to a subset of Oracle Application Express Data Reporter accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14898","description":"Vulnerability in the Oracle Application Express Packaged Apps component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise Oracle Application Express Packaged Apps. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express Packaged Apps, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Express Packaged Apps accessible data as well as unauthorized read access to a subset of Oracle Application Express Packaged Apps accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14897","description":"Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login). Supported versions that are affected are 12.0.1, 12.0.2 and 12.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14896","description":"Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Payments accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14895","description":"Vulnerability in the Oracle Utilities Framework product of Oracle Utilities Applications (component: System Wide). Supported versions that are affected are 2.2.0.0.0, 4.2.0.2.0, 4.2.0.3.0, 4.3.0.1.0 - 4.3.0.6.0, 4.4.0.0.0 and 4.4.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Utilities Framework. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Utilities Framework accessible data as well as unauthorized read access to a subset of Oracle Utilities Framework accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14894","description":"Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0 and 14.0.0-14.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Corporate Lending accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14890","description":"Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login). Supported versions that are affected are 12.0.1, 12.0.2 and 12.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14887","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.3.0 and 14.0.0-14.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14877","description":"Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Logging). Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality OPERA 5 Property Services accessible data as well as unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14858","description":"Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Logging). Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality OPERA 5 Property Services. CVSS 3.1 Base Score 6.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14854","description":"Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: UI and Visualization). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Infrastructure Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Hyperion Infrastructure Technology accessible data as well as unauthorized access to critical data or complete access to all Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14840","description":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Object Library, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14832","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14826","description":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: SQL Extensions). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Applications Manager accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14823","description":"Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.3 - 12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle CRM Technical Foundation accessible data as well as unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14822","description":"Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Installed Base, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14813","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Grids). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14811","description":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: AMP EBS Integration). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Applications Manager accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14810","description":"Vulnerability in the Oracle Hospitality Suite8 product of Oracle Hospitality Applications (component: WebConnect). Supported versions that are affected are 8.10.2 and 8.11-8.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Suite8 accessible data as well as unauthorized read access to a subset of Oracle Hospitality Suite8 accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14806","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14803","description":"Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-14802","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14801","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14795","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14792","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-14788","description":"Vulnerability in the Oracle Communications Diameter Signaling Router (DSR) product of Oracle Communications (component: User Interface). Supported versions that are affected are 8.0.0.0-8.4.0.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Diameter Signaling Router (DSR). Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Diameter Signaling Router (DSR), attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Diameter Signaling Router (DSR) accessible data as well as unauthorized read access to a subset of Oracle Communications Diameter Signaling Router (DSR) accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14787","description":"Vulnerability in the Oracle Communications Diameter Signaling Router (DSR) product of Oracle Communications (component: User Interface). Supported versions that are affected are 8.0.0.0-8.4.0.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Diameter Signaling Router (DSR). Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Diameter Signaling Router (DSR), attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Diameter Signaling Router (DSR) accessible data as well as unauthorized read access to a subset of Oracle Communications Diameter Signaling Router (DSR) accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14783","description":"Vulnerability in the Oracle Hospitality RES 3700 product of Oracle Food and Beverage Applications (component: CAL). The supported version that is affected is 5.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hospitality RES 3700. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality RES 3700 accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14778","description":"Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Global Payroll Core. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Global Payroll Core accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Global Payroll Core accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise HCM Global Payroll Core. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14772","description":"Vulnerability in the Hyperion Lifecycle Management product of Oracle Hyperion (component: Shared Services). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Lifecycle Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Hyperion Lifecycle Management accessible data. CVSS 3.1 Base Score 4.2 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14768","description":"Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion (component: Smart View Provider). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Hyperion Analytic Provider Services executes to compromise Hyperion Analytic Provider Services. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hyperion Analytic Provider Services accessible data as well as unauthorized read access to a subset of Hyperion Analytic Provider Services accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Hyperion Analytic Provider Services. CVSS 3.1 Base Score 4.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14767","description":"Vulnerability in the Hyperion BI+ product of Oracle Hyperion (component: IQR-Foundation service). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise Hyperion BI+. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hyperion BI+ accessible data. CVSS 3.1 Base Score 4.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14764","description":"Vulnerability in the Hyperion Planning product of Oracle Hyperion (component: Application Development Framework). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Planning. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Hyperion Planning accessible data. CVSS 3.1 Base Score 4.2 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14763","description":"Vulnerability in the Oracle Application Express Quick Poll component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise Oracle Application Express Quick Poll. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express Quick Poll, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Express Quick Poll accessible data as well as unauthorized read access to a subset of Oracle Application Express Quick Poll accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14762","description":"Vulnerability in the Oracle Application Express component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application Express. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Express accessible data as well as unauthorized read access to a subset of Oracle Application Express accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14761","description":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Manager accessible data as well as unauthorized read access to a subset of Oracle Applications Manager accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14757","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). The supported version that is affected is 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14753","description":"Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Reporting and Analytics executes to compromise Oracle Hospitality Reporting and Analytics. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14752","description":"Vulnerability in the Hyperion Lifecycle Management product of Oracle Hyperion (component: Shared Services). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Lifecycle Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Hyperion Lifecycle Management accessible data. CVSS 3.1 Base Score 4.2 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14746","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popup windows). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14745","description":"Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component: General). Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: prior to 20.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle REST Data Services accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14744","description":"Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component: General). Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: prior to 20.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle REST Data Services accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-8929","description":"A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext, which result in the creation of a second ciphertext that can decrypt to the same plaintext. This can be a problem with encrypting deterministic AEAD with a single key, and rely on a unique ciphertext-per-plaintext.","exploit_maturity":"No public exploit","published":"2020-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-13937","description":"Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha has one restful api which exposed Kylin's configuration information without any authentication, so it is dangerous because some confidential information entries will be disclosed to everyone.","exploit_maturity":"Working exploit published","published":"2020-10-19","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-14299","description":"A flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy SecurityRealm, to delegate to a legacy PicketBox SecurityDomain, and then reloaded to admin-only mode. This flaw allows an attacker to perform a complete authentication bypass by using an arbitrary user and password. The highest threat to vulnerability is to system availability.","exploit_maturity":"No public exploit","published":"2020-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-7744","description":"This affects all versions of package com.mintegral.msdk:alphab. The Android SDK distributed by the company contains malicious functionality in this module that tracks: 1. Downloads from Google urls either within Google apps or via browser including file downloads, e-mail attachments and Google Docs links. 2. All apk downloads, either organic or not. Mintegral listens to download events in Android's download manager and detects if the downloaded file's url contains: a. google.com or comes from a Google app (the com.android.vending package) b. Ends with .apk for apk downloads In both cases, the module sends the captured data back to Mintegral's servers. Note that the malicious functionality keeps running even if the app is currently not in focus (running in the background).","exploit_maturity":"No public exploit","published":"2020-10-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-7318","description":"Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.","exploit_maturity":"Working exploit published","published":"2020-10-14","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-7317","description":"Cross-Site Scripting vulnerability in McAfee ePolicy Orchistrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via parameter values for \"syncPointList\" not being correctly sanitsed.","exploit_maturity":"No public exploit","published":"2020-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-15250","description":"In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this directory they are, by default, readable by other users on that same system. This vulnerability does not allow other users to overwrite the contents of these directories or files. This is purely an information disclosure vulnerability. This vulnerability impacts you if the JUnit tests write sensitive information, like API keys or passwords, into the temporary folder, and the JUnit tests execute in an environment where the OS has other untrusted users. Because certain JDK file system APIs were only added in JDK 1.7, this this fix is dependent upon the version of the JDK you are using. For Java 1.7 and higher users: this vulnerability is fixed in 4.13.1. For Java 1.6 and lower users: no patch is available, you must use the workaround below. If you are unable to patch, or are stuck running on Java 1.6, specifying the `java.io.tmpdir` system environment variable to a directory that is exclusively owned by the executing user will fix this vulnerability. For more information, including an example of vulnerable code, see the referenced GitHub Security Advisory.","exploit_maturity":"No public exploit","published":"2020-10-12","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-13943","description":"If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.","exploit_maturity":"Forecast only","published":"2020-10-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-13955","description":"HttpUtils#getURLConnection method disables explicitly hostname verification for HTTPS connections making clients vulnerable to man-in-the-middle attacks. Calcite uses internally this method to connect with Druid and Splunk so information leakage may happen when using the respective Calcite adapters. The method itself is in a utility class so people may use it to create vulnerable HTTPS connections for other applications. From Apache Calcite 1.26 onwards, the hostname verification will be performed using the default JVM truststore.","exploit_maturity":"No public exploit","published":"2020-10-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2298","description":"Jenkins Nerrvana Plugin 1.02.06 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.","exploit_maturity":"No public exploit","published":"2020-10-08","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2296","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Shared Objects Plugin 0.44 and earlier allows attackers to configure shared objects.","exploit_maturity":"No public exploit","published":"2020-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2295","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Maven Cascade Release Plugin 1.3.2 and earlier allows attackers to start cascade builds and layout builds, and reconfigure the plugin.","exploit_maturity":"No public exploit","published":"2020-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2294","description":"Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to start cascade builds and layout builds, and reconfigure the plugin.","exploit_maturity":"No public exploit","published":"2020-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2293","description":"Jenkins Persona Plugin 2.4 and earlier allows users with Overall/Read permission to read arbitrary files on the Jenkins controller.","exploit_maturity":"No public exploit","published":"2020-10-08","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2292","description":"Jenkins Release Plugin 2.10.2 and earlier does not escape the release version in badge tooltip, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Release/Release permission.","exploit_maturity":"No public exploit","published":"2020-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2290","description":"Jenkins Active Choices Plugin 2.4 and earlier does not escape some return values of sandboxed scripts for Reactive Reference Parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2020-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2289","description":"Jenkins Active Choices Plugin 2.4 and earlier does not escape the name and description of build parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2020-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2288","description":"In Jenkins Audit Trail Plugin 3.6 and earlier, the default regular expression pattern could be bypassed in many cases by adding a suffix to the URL that would be ignored during request handling.","exploit_maturity":"No public exploit","published":"2020-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2287","description":"Jenkins Audit Trail Plugin 3.6 and earlier applies pattern matching to a different representation of request URL paths than the Stapler web framework uses for dispatching requests, which allows attackers to craft URLs that bypass request logging of any target URL.","exploit_maturity":"No public exploit","published":"2020-10-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-26870","description":"Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.","exploit_maturity":"No public exploit","published":"2020-10-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-13940","description":"In Apache NiFi 1.0.0 to 1.11.4, the notification service manager and various policy authorizer and user group provider objects allowed trusted administrators to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services (via XXE).","exploit_maturity":"No public exploit","published":"2020-10-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-26137","description":"urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.","exploit_maturity":"No public exploit","published":"2020-09-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-19676","description":"Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed when not logged in. (detail:https://github.com/alibaba/nacos/issues/2284)","exploit_maturity":"No public exploit","published":"2020-09-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-13953","description":"In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run.","exploit_maturity":"No public exploit","published":"2020-09-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-15840","description":"In Liferay Portal before 7.3.1, Liferay Portal 6.2 EE, and Liferay DXP 7.2, DXP 7.1 and DXP 7.0, the property 'portlet.resource.id.banned.paths.regexp' can be bypassed with doubled encoded URLs.","exploit_maturity":"No public exploit","published":"2020-09-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2285","description":"A missing permission check in Jenkins Liquibase Runner Plugin 1.4.7 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2020-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2283","description":"Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not escape changeset contents, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users able to control changeset files evaluated by the plugin.","exploit_maturity":"No public exploit","published":"2020-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2282","description":"Jenkins Implied Labels Plugin 0.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to configure the plugin.","exploit_maturity":"No public exploit","published":"2020-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2281","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources.","exploit_maturity":"No public exploit","published":"2020-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-10687","description":"A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own.","exploit_maturity":"No public exploit","published":"2020-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-15839","description":"Liferay Portal before 7.3.3, and Liferay DXP 7.1 before fix pack 18 and 7.2 before fix pack 6, does not restrict the size of a multipart/form-data POST action, which allows remote authenticated users to conduct denial-of-service attacks by uploading large files.","exploit_maturity":"No public exploit","published":"2020-09-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-4590","description":"IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a denial of service attack conducted by an authenticated client. IBM X-Force ID: 184650.","exploit_maturity":"No public exploit","published":"2020-09-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-5421","description":"In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","exploit_maturity":"No public exploit","published":"2020-09-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-25633","description":"A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data confidentiality.","exploit_maturity":"No public exploit","published":"2020-09-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-14338","description":"A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the \"use-grammar-pool-only\" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This issue is the same flaw as CVE-2020-14621, which affected OpenJDK, and uses a similar code. This flaw affects all Xerces JBoss versions before 2.12.0.SP3.","exploit_maturity":"No public exploit","published":"2020-09-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2278","description":"Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permission to replace any other '.xml' file on the Jenkins controller with a job config.xml file's content.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2277","description":"Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2275","description":"Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins controller to job workspaces, allowing attackers with Job/Configure permission to read arbitrary files on the Jenkins controller.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2274","description":"Jenkins ElasTest Plugin 1.2.1 and earlier stores its server password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2273","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2272","description":"A missing permission check in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2271","description":"Jenkins Locked Files Report Plugin 1.6 and earlier does not escape locked files' names in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2270","description":"Jenkins ClearCase Release Plugin 0.3 and earlier does not escape the composite baseline in badge tooltip, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2269","description":"Jenkins chosen-views-tabbar Plugin 1.2 and earlier does not escape view names in the dropdown to select views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with the ability to configure views.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2267","description":"A missing permission check in Jenkins MongoDB Plugin 1.3 and earlier allows attackers with Overall/Read permission to gain access to some metadata of any arbitrary files on the Jenkins controller.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2266","description":"Jenkins Description Column Plugin 1.3 and earlier does not escape the job description in the column tooltip, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2265","description":"Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not escape the method information in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide report files to the plugin's post-build step.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2264","description":"Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2263","description":"Jenkins Radiator View Plugin 1.29 and earlier does not escape the full name of the jobs in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2262","description":"Jenkins Android Lint Plugin 2.6 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide report files to the plugin's post-build step.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2260","description":"A missing permission check in Jenkins Perfecto Plugin 1.17 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2259","description":"Jenkins computer-queue-plugin Plugin 1.5 and earlier does not escape the agent name in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2258","description":"Jenkins Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view that HTTP endpoint.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2257","description":"Jenkins Validating String Parameter Plugin 2.4 and earlier does not escape various user-controlled fields, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2256","description":"Jenkins Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2255","description":"A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2254","description":"Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with Job/Configure or Job/Create permission to read arbitrary files on the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2253","description":"Jenkins Email Extension Plugin 2.75 and earlier does not perform hostname validation when connecting to the configured SMTP server.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2252","description":"Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-1710","description":"The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-1694","description":"A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users having access to sensitive information outside of their permissions.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-13928","description":"Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-10748","description":"A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some circumstances. This flaw allows an attacker to conduct cross-site scripting or further attacks.","exploit_maturity":"No public exploit","published":"2020-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-15171","description":"In XWiki before versions 11.10.5 or 12.2.1, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context which contains tools allowing to instantiate arbitrary Java objects and invoke methods that may lead to arbitrary code execution. The only workaround is to give SCRIPT right only to trusted users.","exploit_maturity":"No public exploit","published":"2020-09-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-13920","description":"Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the \"jmxrmi\" entry. It is possible to connect to the registry without authentication and call the rebind method to rebind jmxrmi to something else. If an attacker creates another server to proxy the original, and bound that, he effectively becomes a man in the middle and is able to intercept the credentials when an user connects. Upgrade to Apache ActiveMQ 5.15.12.","exploit_maturity":"No public exploit","published":"2020-09-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-23814","description":"Multiple cross-site scripting (XSS) vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) AppName and (2)AddressList parameter in JobGroupController.java file.","exploit_maturity":"Working exploit published","published":"2020-09-03","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-2251","description":"Jenkins SoapUI Pro Functional Testing Plugin 1.5 and earlier transmits project passwords in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2020-09-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2250","description":"Jenkins SoapUI Pro Functional Testing Plugin 1.3 and earlier stores project passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by attackers with Extended Read permission, or access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2020-09-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2248","description":"Jenkins JSGames Plugin 0.2 and earlier evaluates part of a URL as code, resulting in a reflected cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2020-09-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2247","description":"Jenkins Klocwork Analysis Plugin 2020.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.","exploit_maturity":"No public exploit","published":"2020-09-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2246","description":"Jenkins Valgrind Plugin 0.28 and earlier does not escape content in Valgrind XML reports, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control Valgrind XML report contents.","exploit_maturity":"No public exploit","published":"2020-09-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2244","description":"Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to provide console output for builds used to test build log indications.","exploit_maturity":"No public exploit","published":"2020-09-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2243","description":"Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.","exploit_maturity":"No public exploit","published":"2020-09-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2242","description":"A missing permission check in Jenkins database Plugin 1.6 and earlier allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified database server using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2020-09-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2239","description":"Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.","exploit_maturity":"No public exploit","published":"2020-09-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2238","description":"Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters' page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2020-09-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-13946","description":"In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorised operations. Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables this issue to be exploited remotely.","exploit_maturity":"No public exploit","published":"2020-09-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-4575","description":"IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting when High Availability Deployment Manager is configured.","exploit_maturity":"No public exploit","published":"2020-08-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-7019","description":"In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attacker gaining additional permissions against a restricted index.","exploit_maturity":"No public exploit","published":"2020-08-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-12480","description":"In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be parsed.","exploit_maturity":"No public exploit","published":"2020-08-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2237","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision.","exploit_maturity":"No public exploit","published":"2020-08-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2236","description":"Jenkins Yet Another Build Visualizer Plugin 1.11 and earlier does not escape tooltip content, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Run/Update permission.","exploit_maturity":"No public exploit","published":"2020-08-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2235","description":"A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows attackers to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2020-08-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2234","description":"A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2020-08-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2233","description":"A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2020-08-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2231","description":"Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via 'Trigger builds remotely', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission or knowledge of the Authentication Token.","exploit_maturity":"Working exploit published","published":"2020-08-12","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-2230","description":"Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.","exploit_maturity":"Working exploit published","published":"2020-08-12","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-2229","description":"Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons, resulting in a stored cross-site scripting (XSS) vulnerability.","exploit_maturity":"Working exploit published","published":"2020-08-12","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-5412","description":"Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting the dashboard. A malicious user, or attacker, can send a request to other servers that should not be exposed publicly.","exploit_maturity":"Working exploit published","published":"2020-08-07","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-16135","description":"libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.","exploit_maturity":"No public exploit","published":"2020-07-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-7017","description":"In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive information or perform destructive actions on behalf of Kibana users who view the region map visualization.","exploit_maturity":"No public exploit","published":"2020-07-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-7016","description":"Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana user can lead to the Kibana process consuming large amounts of CPU and becoming unresponsive.","exploit_maturity":"No public exploit","published":"2020-07-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14307","description":"A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed from the remote InvocationTracker after a response is received in the EJB Client, as well as the server. This flaw allows an attacker to craft a denial of service attack to make the service unavailable.","exploit_maturity":"No public exploit","published":"2020-07-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14297","description":"A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and cause denial of service attack and make services unavailable.","exploit_maturity":"No public exploit","published":"2020-07-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-13932","description":"In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability. The XSS payload is being injected into the admin console's browser. The XSS payload is triggered in the diagram plugin; queue node and the info section.","exploit_maturity":"No public exploit","published":"2020-07-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2966","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2562","description":"Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor Module). Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2227","description":"Jenkins Deployer Framework Plugin 1.2 and earlier does not escape the URL displayed in the build home page, resulting in a stored cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2226","description":"Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration, resulting in a stored cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2225","description":"Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in a stored cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2224","description":"Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a single axis, resulting in a stored cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2223","description":"Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape correctly the 'href' attribute of links to downstream jobs displayed in the build console page, resulting in a stored cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2222","description":"Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the job name in the 'Keep this build forever' badge tooltip, resulting in a stored cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2221","description":"Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a stored cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2220","description":"Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resulting in a stored cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-14722","description":"Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI). Supported versions that are affected are 3.0.0-3.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Communications Broker. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Enterprise Communications Broker, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Communications Broker accessible data as well as unauthorized read access to a subset of Oracle Enterprise Communications Broker accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Enterprise Communications Broker. CVSS 3.1 Base Score 5.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14721","description":"Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI). Supported versions that are affected are 3.0.0-3.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Communications Broker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Communications Broker accessible data as well as unauthorized read access to a subset of Oracle Enterprise Communications Broker accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Enterprise Communications Broker. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14717","description":"Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Common Applications accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14716","description":"Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Common Applications accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14710","description":"Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Security). Supported versions that are affected are 16.0, 17.0 and 18.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Customer Management and Segmentation Foundation accessible data as well as unauthorized read access to a subset of Customer Management and Segmentation Foundation accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14708","description":"Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment). Supported versions that are affected are 16.0, 17.0 and 18.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Customer Management and Segmentation Foundation accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14706","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 17.1.0.0-17.12.17.1, 18.1.0.0-18.8.19 and 19.12.0-19.12.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14693","description":"Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6-8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Insurance Accounting Analyzer. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Insurance Accounting Analyzer accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14692","description":"Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6-8.0.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Loan Loss Forecasting and Provisioning. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Financial Services Loan Loss Forecasting and Provisioning accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14685","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14684","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14662","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14661","description":"Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14659","description":"Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14655","description":"Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: SSL API). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Security Service accessible data as well as unauthorized update, insert or delete access to some of Oracle Security Service accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14653","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 16.1.0.0-16.2.20.1, 17.1.0.0-17.12.17.1 and 18.1.0.0-18.8.18.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14652","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14640","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14638","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14637","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14636","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14635","description":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Logging). Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14627","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14622","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14621","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-14618","description":"Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Mobile App). The supported version that is affected is Prior to 20.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Primavera Unifier. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera Unifier accessible data as well as unauthorized update, insert or delete access to some of Primavera Unifier accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14617","description":"Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Platform, Mobile App). Supported versions that are affected are 16.1, 16.2, 17.7-17.12, 18.8 and 19.12; Mobile App: Prior to 20.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Primavera Unifier. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera Unifier accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14615","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Analytical Applications Infrastructure, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14613","description":"Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced User Interface). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14612","description":"Vulnerability in the PeopleSoft Enterprise HRMS product of Oracle PeopleSoft (component: Time and Labor). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HRMS. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HRMS accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HRMS accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14607","description":"Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware (component: Tile Server). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Fusion Middleware MapViewer. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Fusion Middleware MapViewer, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Fusion Middleware MapViewer accessible data as well as unauthorized read access to a subset of Oracle Fusion Middleware MapViewer accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14605","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14604","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14603","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14601","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Analytical Applications Infrastructure, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14600","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14594","description":"Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Inventory Integration). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hospitality Reporting and Analytics executes to compromise Oracle Hospitality Reporting and Analytics. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Reporting and Analytics. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14592","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14587","description":"Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Expenses). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Expenses. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN Expenses accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise FIN Expenses accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14574","description":"Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications Applications (component: FACE). Supported versions that are affected are 6.1-6.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Communications Interactive Session Recorder executes to compromise Oracle Communications Interactive Session Recorder. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications Interactive Session Recorder accessible data as well as unauthorized update, insert or delete access to some of Oracle Communications Interactive Session Recorder accessible data. CVSS 3.1 Base Score 4.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14572","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14566","description":"Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14563","description":"Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI). Supported versions that are affected are 3.0.0-3.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Communications Broker. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Enterprise Communications Broker, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Communications Broker accessible data as well as unauthorized read access to a subset of Oracle Enterprise Communications Broker accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14562","description":"Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2020-14560","description":"Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion BI+. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion BI+ accessible data. CVSS 3.1 Base Score 4.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14558","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14557","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14556","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-14555","description":"Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14554","description":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Object Library, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14552","description":"Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14549","description":"Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Server). Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera Portfolio Management accessible data as well as unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14546","description":"Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion (component: Close Manager). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Hyperion Financial Close Management accessible data. CVSS 3.1 Base Score 4.2 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14544","description":"Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Domain \u0026 Function Security). The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Transportation Management accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14532","description":"Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.1, 11.2 and prior to 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Platform accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14531","description":"Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server). Supported versions that are affected are 20.6 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel UI Framework accessible data as well as unauthorized update, insert or delete access to some of Siebel UI Framework accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14530","description":"Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: None). The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Security Service accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14529","description":"Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor Module). Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14528","description":"Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-14527","description":"Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera Portfolio Management accessible data as well as unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-15719","description":"libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.","exploit_maturity":"No public exploit","published":"2020-07-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-14900","description":"A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.","exploit_maturity":"No public exploit","published":"2020-07-06","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2219","description":"Jenkins Link Column Plugin 1.0 and earlier does not filter URLs of links created by users with View/Configure permission, resulting in a stored cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2217","description":"Jenkins Compatibility Action Storage Plugin 1.0 and earlier does not escape the content coming from the MongoDB in the testConnection form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2216","description":"A missing permission check in Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified username and password.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2215","description":"A cross-site request forgery vulnerability in Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified username and password.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2214","description":"Jenkins ZAP Pipeline Plugin 1.9 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2213","description":"Jenkins White Source Plugin 19.1.1 and earlier stores credentials unencrypted in its global configuration file and in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission (config.xml), or access to the master file system.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2212","description":"Jenkins GitHub Coverage Reporter Plugin 1.8 and earlier stores secrets unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system or read permissions on the system configuration.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2210","description":"Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier transmits configured passwords in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2209","description":"Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2208","description":"Jenkins Slack Upload Plugin 1.7 and earlier stores a secret unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2207","description":"Jenkins VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2206","description":"Jenkins VncRecorder Plugin 1.25 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2205","description":"Jenkins VncRecorder Plugin 1.25 and earlier does not escape a tool path in the `checkVncServ` form validation endpoint, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by Jenkins administrators.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2204","description":"A missing permission check in Jenkins Fortify on Demand Plugin 5.0.1 and earlier allows attackers with Overall/Read permission to connect to the globally configured Fortify on Demand endpoint using attacker-specified credentials IDs.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2203","description":"A cross-site request forgery vulnerability in Jenkins Fortify on Demand Plugin 5.0.1 and earlier allows attackers to connect to the globally configured Fortify on Demand endpoint using attacker-specified credentials IDs.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2202","description":"A missing permission check in Jenkins Fortify on Demand Plugin 6.0.0 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2201","description":"Jenkins Sonargraph Integration Plugin 3.0.0 and earlier does not escape the file path for the Log file field form validation, resulting in a stored cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-07-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-10727","description":"A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properties file) when executing the `resetUsers` operation. A local attacker can use this flaw to read the contents of the Artemis shadow file.","exploit_maturity":"No public exploit","published":"2020-06-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-1727","description":"A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.","exploit_maturity":"No public exploit","published":"2020-06-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-9495","description":"Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by providing special values to the login form. With certain characters it is possible to modify the LDAP filter used to query the LDAP users. By measuring the response time for the login request, arbitrary attribute data can be retrieved from LDAP user objects.","exploit_maturity":"Proof of concept only","published":"2020-06-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-11980","description":"In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an \"admin\" can actually invoke on an MBean. However there is a vulnerability there for someone who is not an admin, but has a \"viewer\" role. In the 'etc/jmx.acl.cfg', such as role can call get*. It's possible to authenticate as a viewer role + invokes on the MLet getMBeansFromURL method, which goes off to a remote server to fetch the desired MBean, which is then registered in Karaf. At this point the attack fails as \"viewer\" doesn't have the permission to invoke on the MBean. Still, it could act as a SSRF style attack and also it essentially allows a \"viewer\" role to pollute the MBean registry, which is a kind of privilege escalation. The vulnerability is low as it's possible to add a ACL to limit access. Users should update to Apache Karaf 4.2.9 or newer.","exploit_maturity":"No public exploit","published":"2020-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-13444","description":"Liferay Portal 7.x before 7.3.2, and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 5 does not sanitize the information returned by the DDMDataProvider API, which allows remote authenticated users to obtain the password to REST Data Providers.","exploit_maturity":"No public exploit","published":"2020-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-13973","description":"OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT element in which the output is embedded as JavaScript, may be able to confuse the HTML parser as to where the SCRIPT element ends, and cause non-script content to be interpreted as JavaScript.","exploit_maturity":"No public exploit","published":"2020-06-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2199","description":"Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier does not escape the error message for the repository URL field form validation, resulting in a reflected cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-06-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2198","description":"Jenkins Project Inheritance Plugin 19.08.02 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API URL when transmitting job config.xml data to users without Job/Configure.","exploit_maturity":"No public exploit","published":"2020-06-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2197","description":"Jenkins Project Inheritance Plugin 19.08.02 and earlier does not require users to have Job/ExtendedRead permission to access Inheritance Project job configurations in XML format.","exploit_maturity":"No public exploit","published":"2020-06-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2195","description":"Jenkins Compact Columns Plugin 1.11 and earlier displays the unprocessed job description in tooltips, resulting in a stored cross-site scripting vulnerability that can be exploited by users with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2020-06-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2194","description":"Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the display name of the builds in the trend chart, resulting in a stored cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-06-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2193","description":"Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the parser identifier when rendering charts, resulting in a stored cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-06-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2192","description":"A cross-site request forgery vulnerability in Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier allows attackers to add or remove agent labels.","exploit_maturity":"No public exploit","published":"2020-06-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2191","description":"Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier does not check permissions on API endpoints that allow adding and removing agent labels.","exploit_maturity":"No public exploit","published":"2020-06-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2190","description":"Jenkins Script Security Plugin 1.72 and earlier does not correctly escape pending or approved classpath entries on the In-process Script Approval page, resulting in a stored cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-06-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-10719","description":"A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.","exploit_maturity":"No public exploit","published":"2020-05-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-7656","description":"jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove \"\u003cscript\u003e\" HTML tags that contain a whitespace character, i.e: \"\u003c/script \u003e\", which results in the enclosed script logic to be executed.","exploit_maturity":"Working exploit published","published":"2020-05-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-10723","description":"A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption.","exploit_maturity":"No public exploit","published":"2020-05-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-10722","description":"A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.","exploit_maturity":"No public exploit","published":"2020-05-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-1758","description":"A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a man-in-the-middle (MITM) attack.","exploit_maturity":"No public exploit","published":"2020-05-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-5408","description":"Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, 5.0.x prior to 5.0.16 and 4.2.x prior to 4.2.16 use a fixed null initialization vector with CBC Mode in the implementation of the queryable text encryptor. A malicious user with access to the data that has been encrypted using such an encryptor may be able to derive the unencrypted values using a dictionary attack.","exploit_maturity":"No public exploit","published":"2020-05-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-4365","description":"IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 178964.","exploit_maturity":"No public exploit","published":"2020-05-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-1960","description":"A vulnerability in Apache Flink (1.1.0 to 1.1.5, 1.2.0 to 1.2.1, 1.3.0 to 1.3.3, 1.4.0 to 1.4.2, 1.5.0 to 1.5.6, 1.6.0 to 1.6.4, 1.7.0 to 1.7.2, 1.8.0 to 1.8.3, 1.9.0 to 1.9.2, 1.10.0) where, when running a process with an enabled JMXReporter, with a port configured via metrics.reporter.reporter_name\u003e.port, an attacker with local access to the machine and JMX port can execute a man-in-the-middle attack using a specially crafted request to rebind the JMXRMI registry to one under the attacker's control. This compromises any connection established to the process via JMX, allowing extraction of credentials and any other transferred data.","exploit_maturity":"No public exploit","published":"2020-05-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-1941","description":"In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.","exploit_maturity":"No public exploit","published":"2020-05-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-17572","description":"In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in brokers, which leads to a directory traversal vulnerability. Users of the affected versions should apply one of the following: Upgrade to Apache RocketMQ 4.6.1 or later.","exploit_maturity":"No public exploit","published":"2020-05-14","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-7647","description":"All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors.","exploit_maturity":"No public exploit","published":"2020-05-11","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-1724","description":"A flaw was found in Keycloak in versions before 9.0.2. This flaw allows a malicious user that is currently logged in, to see the personal information of a previously logged out user in the account manager section.","exploit_maturity":"No public exploit","published":"2020-05-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-1698","description":"A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality.","exploit_maturity":"No public exploit","published":"2020-05-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-4421","description":"IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to spoof another users identify. IBM X-Force ID: 180084.","exploit_maturity":"No public exploit","published":"2020-05-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2188","description":"A missing permission check in Jenkins Amazon EC2 Plugin 1.50.1 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2020-05-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2187","description":"Jenkins Amazon EC2 Plugin 1.50.1 and earlier unconditionally accepts self-signed certificates and does not perform hostname validation, enabling man-in-the-middle attacks.","exploit_maturity":"No public exploit","published":"2020-05-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2186","description":"A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances.","exploit_maturity":"No public exploit","published":"2020-05-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2185","description":"Jenkins Amazon EC2 Plugin 1.50.1 and earlier does not validate SSH host keys when connecting agents, enabling man-in-the-middle attacks.","exploit_maturity":"No public exploit","published":"2020-05-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2184","description":"A cross-site request forgery vulnerability in Jenkins CVS Plugin 2.15 and earlier allows attackers to create and manipulate tags, and to connect to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2020-05-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2183","description":"Jenkins Copy Artifact Plugin 1.43.1 and earlier performs improper permission checks, allowing attackers to copy artifacts from jobs they have no permission to access.","exploit_maturity":"No public exploit","published":"2020-05-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2182","description":"Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumstances.","exploit_maturity":"No public exploit","published":"2020-05-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2181","description":"Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build contains no build steps.","exploit_maturity":"No public exploit","published":"2020-05-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-10693","description":"A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation (escaping, stripping) controls that developers may have put in place when handling user-controlled data in error messages.","exploit_maturity":"No public exploit","published":"2020-05-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-1732","description":"A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE Security with WildFly Elytron which can lead to the possibility of being handled using the identity from another request.","exploit_maturity":"No public exploit","published":"2020-05-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-10686","description":"A flaw was found in Keycloak version 8.0.2 and 9.0.0, and was fixed in Keycloak version 9.0.1, where a malicious user registers as oneself. The attacker could then use the remove devices form to post different credential IDs and possibly remove MFA devices for other users.","exploit_maturity":"No public exploit","published":"2020-05-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-17557","description":"It was found that the Apache Syncope EndUser UI login page prio to 2.0.15 and 2.1.6 reflects the successMessage parameters. By this mean, a user accessing the Enduser UI could execute javascript code from URL query string.","exploit_maturity":"No public exploit","published":"2020-05-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-11009","description":"In Rundeck before version 3.2.6, authenticated users can craft a request that reveals Execution data and logs and Job details that they are not authorized to see. Depending on the configuration and the way that Rundeck is used, this could result in anything between a high severity risk, or a very low risk. If access is tightly restricted and all users on the system have access to all projects, this is not really much of an issue. If access is wider and allows login for users that do not have access to any projects, or project access is restricted, there is a larger issue. If access is meant to be restricted and secrets, sensitive data, or intellectual property are exposed in Rundeck execution output and job data, the risk becomes much higher. This vulnerability is patched in version 3.2.6","exploit_maturity":"No public exploit","published":"2020-04-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-9482","description":"If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Registry invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging out to make API requests to NiFi Registry.","exploit_maturity":"No public exploit","published":"2020-04-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-4329","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive information, caused by improper parameter checking. This could be exploited to conduct spoofing attacks. IBM X-Force ID: 177841.","exploit_maturity":"No public exploit","published":"2020-04-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-9489","description":"A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade to 1.24.1 or later. The vulnerabilities in the MP4Parser were partially fixed by upgrading the com.googlecode:isoparser:1.1.22 dependency to org.tallison:isoparser:1.9.41.2. For unrelated security reasons, we upgraded org.apache.cxf to 3.3.6 as part of the 1.24.1 release.","exploit_maturity":"No public exploit","published":"2020-04-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2177","description":"Jenkins Copr Plugin 0.3 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2020-04-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-11007","description":"In Shopizer before version 2.11.0, using API or Controller based versions negative quantity is not adequately validated hence creating incorrect shopping cart and order total. This vulnerability makes it possible to create a negative total in the shopping cart. This has been patched in version 2.11.0.","exploit_maturity":"No public exploit","published":"2020-04-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2955","description":"Vulnerability in the Oracle FLEXCUBE Core Banking product of Oracle Financial Services Applications (component: Transaction Processing). The supported version that is affected is 4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Core Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Core Banking accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Core Banking. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2954","description":"Vulnerability in the PeopleSoft Enterprise HRMS product of Oracle PeopleSoft (component: Candidate Gateway). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise HRMS. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HRMS, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HRMS accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HRMS accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2952","description":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HTTP Server accessible data as well as unauthorized read access to a subset of Oracle HTTP Server accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2949","description":"Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2947","description":"Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Absence Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Absence Management accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2946","description":"Vulnerability in the Application Performance Management product of Oracle Enterprise Manager (component: EM Request Monitoring). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Application Performance Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Application Performance Management accessible data as well as unauthorized update, insert or delete access to some of Application Performance Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Application Performance Management. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2932","description":"Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Knowledge. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2920","description":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). Supported versions that are affected are 9.3.3, 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2912","description":"Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Self-Service). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community. While the vulnerability is in PeopleSoft Enterprise CS Campus Community, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.0 Base Score 5.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2906","description":"Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Change). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Purchasing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise SCM Purchasing accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2899","description":"Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Purchasing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise SCM Purchasing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise SCM Purchasing accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise SCM Purchasing accessible data. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2889","description":"Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2888","description":"Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Partners). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Marketing accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2887","description":"Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2886","description":"Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2869","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2868","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Diagnostic Framework). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2866","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2865","description":"Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: Installation). Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Configurator accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2864","description":"Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Accounts). Supported versions that are affected are 12.1.3 and 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupplier Portal. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iSupplier Portal accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2862","description":"Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle One-to-One Fulfillment accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2830","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2829","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Management Services). The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2811","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2810","description":"Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2800","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2799","description":"Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: GraalVM Compiler). Supported versions that are affected are 19.3.1 and 20.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle GraalVM Enterprise Edition accessible data. CVSS 3.0 Base Score 6.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2797","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2795","description":"Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). Supported versions that are affected are 8.6.0-8.6.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Knowledge executes to compromise Oracle Knowledge. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Knowledge. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2789","description":"Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iSupport, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iSupport accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2781","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2777","description":"Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Hyperion Financial Management accessible data. CVSS 3.0 Base Score 4.2 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2775","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2772","description":"Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Absence Recording, Maintenance). Supported versions that are affected are 12.2.6-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Human Resources. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Human Resources, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Human Resources accessible data. CVSS 3.0 Base Score 4.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2766","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2753","description":"Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Workflow accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2751","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2747","description":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: SSO Engine). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Access Manager accessible data as well as unauthorized read access to a subset of Oracle Access Manager accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2745","description":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Federation). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Access Manager. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2744","description":"Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Security). Supported versions that are affected are 6.3.7, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Transportation Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Transportation Management accessible data as well as unauthorized read access to a subset of Oracle Transportation Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2740","description":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Access Manager accessible data as well as unauthorized read access to a subset of Oracle Access Manager accessible data. CVSS 3.0 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2738","description":"Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI, SWSE). Supported versions that are affected are 20.2 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2706","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Project Manager). Supported versions that are affected are 16.2.0.0 - 16.2.19.3, 17.12.0.0 - 17.12.17.0, 18.8.0.0 - 18.8.18.0, 19.12.1.0 - 19.12.3.0 and 20.1.0.0 - 20.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2594","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Project Manager). Supported versions that are affected are 16.2.0.0 - 16.2.19.3, 17.12.0.0 - 17.12.17.0, 18.8.0.0 - 18.8.18.0, 19.12.1.0 - 19.12.3.0 and 20.1.0.0 - 20.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2553","description":"Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Knowledge accessible data as well as unauthorized read access to a subset of Oracle Knowledge accessible data. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2524","description":"Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: InQuira Search). Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Knowledge. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2522","description":"Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). Supported versions that are affected are 8.6.0-8.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Knowledge accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2176","description":"Multiple form validation endpoints in Jenkins useMango Runner Plugin 1.4 and earlier do not escape values received from the useMango service, resulting in a cross-site scripting (XSS) vulnerability exploitable by users able to control the values returned from the useMango service.","exploit_maturity":"No public exploit","published":"2020-04-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2175","description":"Jenkins FitNesse Plugin 1.31 and earlier does not correctly escape report contents before showing them on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users able to control the XML input files processed by the plugin.","exploit_maturity":"No public exploit","published":"2020-04-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2174","description":"Jenkins AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation output, resulting in a reflected cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-04-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2173","description":"Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports served by the plugin, resulting in an XSS vulnerability exploitable by users able to change report content.","exploit_maturity":"No public exploit","published":"2020-04-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2172","description":"Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.","exploit_maturity":"No public exploit","published":"2020-04-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-1728","description":"A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are completely missing general HTTP security headers in HTTP-responses. This does not directly lead to a security issue, yet it might aid attackers in their efforts to exploit other problems. The flaws unnecessarily make the servers more prone to Clickjacking, channel downgrade attacks and other similar client-based attack vectors.","exploit_maturity":"No public exploit","published":"2020-04-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-4304","description":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176670.","exploit_maturity":"No public exploit","published":"2020-04-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-4303","description":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176668.","exploit_maturity":"No public exploit","published":"2020-04-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-1958","description":"When LDAP authentication is enabled in Apache Druid 0.17.0, callers of Druid APIs with a valid set of LDAP credentials can bypass the credentialsValidator.userSearch filter barrier that determines if a valid LDAP user is allowed to authenticate with Druid. They are still subject to role-based authorization checks, if configured. Callers of Druid APIs can also retrieve any LDAP attribute values of users that exist on the LDAP server, so long as that information is visible to the Druid server. This information disclosure does not require the caller itself to be a valid LDAP user.","exploit_maturity":"Proof of concept only","published":"2020-04-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-1954","description":"Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationManagerImpl is not disabled, then it is vulnerable to a man-in-the-middle (MITM) style attack. An attacker on the same host can connect to the registry and rebind the entry to another server, thus acting as a proxy to the original. They are then able to gain access to all of the information that is sent and received over JMX.","exploit_maturity":"No public exploit","published":"2020-04-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-10203","description":"Sonatype Nexus Repository before 3.21.2 allows XSS.","exploit_maturity":"No public exploit","published":"2020-04-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-11802","description":"In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. However, if a node receives a request for a collection it does not host, it proxies the request to a relevant node and serves the request. Solr bypasses all authorization settings for such requests. This affects all Solr versions prior to 7.7 that use the default authorization mechanism of Solr (RuleBasedAuthorizationPlugin).","exploit_maturity":"No public exploit","published":"2020-04-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-7599","description":"All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log File. When a plugin author publishes a Gradle plugin while running Gradle with the --info log level flag, the Gradle Logger logs an AWS pre-signed URL. If this build log is publicly visible (as it is in many popular public CI systems like TravisCI) this AWS pre-signed URL would allow a malicious actor to replace a recently uploaded plugin with their own.","exploit_maturity":"No public exploit","published":"2020-03-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-5289","description":"In Elide before 4.5.14, it is possible for an adversary to \"guess and check\" the value of a model field they do not have access to assuming they can read at least one other field in the model. The adversary can construct filter expressions for an inaccessible field to filter a collection. The presence or absence of models in the returned collection can be used to reconstruct the value of the inaccessible field. Resolved in Elide 4.5.14 and greater.","exploit_maturity":"No public exploit","published":"2020-03-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2170","description":"Jenkins RapidDeploy Plugin 4.2 and earlier does not escape package names in the table of packages obtained from a remote server, resulting in a stored XSS vulnerability.","exploit_maturity":"No public exploit","published":"2020-03-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2169","description":"A form validation endpoint in Jenkins Queue cleanup Plugin 1.3 and earlier does not properly escape a query parameter displayed in an error message, resulting in a reflected XSS vulnerability.","exploit_maturity":"No public exploit","published":"2020-03-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2164","description":"Jenkins Artifactory Plugin 3.5.0 and earlier stores its Artifactory server password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2020-03-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2163","description":"Jenkins 2.227 and earlier, LTS 2.204.5 and earlier improperly processes HTML content of list view column headers, resulting in a stored XSS vulnerability exploitable by users able to control column headers.","exploit_maturity":"No public exploit","published":"2020-03-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2162","description":"Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not set Content-Security-Policy headers for files uploaded as file parameters to a build, resulting in a stored XSS vulnerability.","exploit_maturity":"No public exploit","published":"2020-03-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2161","description":"Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not properly escape node labels that are shown in the form validation for label expressions on job configuration pages, resulting in a stored XSS vulnerability exploitable by users able to define node labels.","exploit_maturity":"No public exploit","published":"2020-03-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-1744","description":"A flaw was found in keycloak before version 9.0.1. When configuring an Conditional OTP Authentication Flow as a post login flow of an IDP, the failure login events for OTP are not being sent to the brute force protection event queue. So BruteForceProtector does not handle this events.","exploit_maturity":"No public exploit","published":"2020-03-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-1951","description":"A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.","exploit_maturity":"No public exploit","published":"2020-03-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-1950","description":"A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.","exploit_maturity":"No public exploit","published":"2020-03-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-20527","description":"Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp serverURL parameter.","exploit_maturity":"No public exploit","published":"2020-03-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-20526","description":"Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp password parameter.","exploit_maturity":"No public exploit","published":"2020-03-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-20525","description":"Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp driver parameter.","exploit_maturity":"No public exploit","published":"2020-03-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-19336","description":"A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the user's oVirt session.","exploit_maturity":"No public exploit","published":"2020-03-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-12416","description":"we got reports for 2 injection attacks against the DeltaSpike windowhandler.js. This is only active if a developer selected the ClientSideWindowStrategy which is not the default.","exploit_maturity":"No public exploit","published":"2020-03-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-20528","description":"Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp username parameter.","exploit_maturity":"No public exploit","published":"2020-03-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-10544","description":"An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provide JavaScript code in an input field whose data is later used as a tooltip title without any input validation.","exploit_maturity":"No public exploit","published":"2020-03-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-6858","description":"Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header.","exploit_maturity":"No public exploit","published":"2020-03-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-2487","description":"The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.","exploit_maturity":"No public exploit","published":"2020-03-11","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2157","description":"Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2156","description":"Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2155","description":"Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2154","description":"Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2153","description":"Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2152","description":"Jenkins Subversion Release Manager Plugin 1.2 and earlier does not escape the error message for the Repository URL field form validation, resulting in a reflected cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2151","description":"Jenkins Quality Gates Plugin 2.5 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2150","description":"Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2149","description":"Jenkins Repository Connector Plugin 1.2.6 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2148","description":"A missing permission check in Jenkins Mac Plugin 1.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2147","description":"A cross-site request forgery vulnerability in Jenkins Mac Plugin 1.1.0 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2145","description":"Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores its Zephyr password in plain text on the Jenkins master file system.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2143","description":"Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2142","description":"A missing permission check in Jenkins P4 Plugin 1.10.10 and earlier allows attackers with Overall/Read permission to trigger builds.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2141","description":"A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2140","description":"Jenkins Audit Trail Plugin 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability.","exploit_maturity":"Working exploit published","published":"2020-03-09","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-2139","description":"An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file system.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2137","description":"Jenkins Timestamper Plugin 1.11.1 and earlier does not sanitize HTML formatting of its output, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission.","exploit_maturity":"No public exploit","published":"2020-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-5405","description":"Spring Cloud Config, versions 2.2.x prior to 2.2.2, versions 2.1.x prior to 2.1.7, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead a directory traversal attack.","exploit_maturity":"Working exploit published","published":"2020-03-05","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-14886","description":"A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are stored in errai_security_context. The encoding used for storing the passwords is Base64, not an encryption algorithm, and any recovery of these passwords could lead to user passwords being exposed.","exploit_maturity":"No public exploit","published":"2020-03-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-5404","description":"The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak during a redirect to a different domain. In order for this to happen, the HttpClient must have been explicitly configured to follow redirects.","exploit_maturity":"No public exploit","published":"2020-03-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-9447","description":"There is an XSS (cross-site scripting) vulnerability in GwtUpload 1.0.3 in the file upload functionality. Someone can upload a file with a malicious filename, which contains JavaScript code, which would result in XSS. Cross-site scripting enables attackers to steal data, change the appearance of a website, and perform other malicious activities like phishing or drive-by hacking.","exploit_maturity":"No public exploit","published":"2020-02-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-2992","description":"Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.","exploit_maturity":"No public exploit","published":"2020-02-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-1935","description":"In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.","exploit_maturity":"No public exploit","published":"2020-02-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10797","description":"Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled.","exploit_maturity":"No public exploit","published":"2020-02-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2133","description":"Jenkins Applatix Plugin 1.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2132","description":"Jenkins Parasoft Environment Manager Plugin 2.14 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2131","description":"Jenkins Harvest SCM Plugin 0.5.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2130","description":"Jenkins Harvest SCM Plugin 0.5.1 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2129","description":"Jenkins Eagle Tester Plugin 1.0.9 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2128","description":"Jenkins ECX Copy Data Management Plugin 1.9 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2127","description":"Jenkins BMC Release Package and Deployment Plugin 1.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2126","description":"Jenkins DigitalOcean Plugin 1.1 and earlier stores a token unencrypted in the global config.xml file on the Jenkins master where it can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2125","description":"Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2124","description":"Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2122","description":"Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability exploitable by users able to control the Brakeman post-build step input data.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2119","description":"Jenkins Azure AD Plugin 1.1.2 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2118","description":"A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2117","description":"A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2113","description":"Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the default value shown on the UI, resulting in a stored cross-site scripting vulnerability exploitable by users with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2112","description":"Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the parameter name shown on the UI, resulting in a stored cross-site scripting vulnerability exploitable by users with Job/Configure permission.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2111","description":"Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field form validation, resulting in a stored cross-site scripting vulnerability.","exploit_maturity":"No public exploit","published":"2020-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-1697","description":"It was found in all keycloak versions before 9.0.0 that links to external applications (Application Links) in the admin console are not validated properly and could allow Stored XSS attacks. An authed malicious user could create URLs to trick users in other realms, and possibly conduct further attacks.","exploit_maturity":"No public exploit","published":"2020-02-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-4670","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper data representation. IBM X-Force ID: 171319.","exploit_maturity":"No public exploit","published":"2020-02-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-5231","description":"In Opencast before 7.6 and 8.1, users with the role ROLE_COURSE_ADMIN can use the user-utils endpoint to create new users not including the role ROLE_ADMIN. ROLE_COURSE_ADMIN is a non-standard role in Opencast which is referenced neither in the documentation nor in any code (except for tests) but only in the security configuration. From the name – implying an admin for a specific course – users would never expect that this role allows user creation. This issue is fixed in 7.6 and 8.1 which both ship a new default security configuration.","exploit_maturity":"No public exploit","published":"2020-01-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10782","description":"All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658.","exploit_maturity":"No public exploit","published":"2020-01-30","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2107","description":"Jenkins Fortify Plugin 19.1.29 and earlier stores proxy server passwords unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2020-01-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2106","description":"Jenkins Code Coverage API Plugin 1.1.2 and earlier does not escape the filename of the coverage report used in its view, resulting in a stored XSS vulnerability exploitable by users able to change job configurations.","exploit_maturity":"No public exploit","published":"2020-01-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2105","description":"REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks.","exploit_maturity":"No public exploit","published":"2020-01-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2104","description":"Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage chart.","exploit_maturity":"No public exploit","published":"2020-01-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2103","description":"Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session identifiers on a user's detail object in the whoAmI diagnostic page.","exploit_maturity":"Working exploit published","published":"2020-01-29","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-2102","description":"Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC.","exploit_maturity":"No public exploit","published":"2020-01-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2101","description":"Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret.","exploit_maturity":"No public exploit","published":"2020-01-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2100","description":"Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848.","exploit_maturity":"No public exploit","published":"2020-01-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-7934","description":"In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyAccountPortlet are all vulnerable to a persistent XSS issue. Any user can modify these fields with a particular XSS payload, and it will be stored in the database. The payload will then be rendered when a user utilizes the search feature to search for other users (i.e., if a user with modified fields occurs in the search results). This issue was fixed in Liferay Portal CE version 7.3.0 GA1.","exploit_maturity":"Working exploit published","published":"2020-01-28","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-1933","description":"A XSS vulnerability was found in Apache NiFi 1.0.0 to 1.10.0. Malicious scripts could be injected to the UI through action by an unaware authenticated user in Firefox. Did not appear to occur in other browsers.","exploit_maturity":"No public exploit","published":"2020-01-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-1928","description":"An information disclosure vulnerability was found in Apache NiFi 1.10.0. The sensitive parameter parser would log parsed values for debugging purposes. This would expose literal values entered in a sensitive property when no parameter was present.","exploit_maturity":"No public exploit","published":"2020-01-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10770","description":"All versions of io.ratpack:ratpack-core from 0.9.10 inclusive and before 1.7.6 are vulnerable to Cross-site Scripting (XSS). This affects the development mode error handler when an exception message contains untrusted data. Note the production mode error handler is not vulnerable - so for this to be utilized in production it would require users to not disable development mode.","exploit_maturity":"No public exploit","published":"2020-01-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-14885","description":"A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential information of the system property's security attribute value is revealed in the JBoss EAP log file when executing a JBoss CLI 'reload' command. This flaw can lead to the exposure of confidential information.","exploit_maturity":"No public exploit","published":"2020-01-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-5397","description":"Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vulnerable because preflight requests should not include credentials and therefore requests should fail authentication. However a notable exception to this are Chrome based browsers when using client certificates for authentication since Chrome sends TLS client certificates in CORS preflight requests in violation of spec requirements. No HTTP body can be sent or received as a result of this attack.","exploit_maturity":"No public exploit","published":"2020-01-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2730","description":"Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: File Upload). Supported versions that are affected are 2.7.0.0, 2.7.0.1 and 2.8.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Revenue Management and Billing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Revenue Management and Billing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Revenue Management and Billing accessible data as well as unauthorized read access to a subset of Oracle Financial Services Revenue Management and Billing accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2729","description":"Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Advanced Console). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Identity Manager accessible data as well as unauthorized read access to a subset of Identity Manager accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2724","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2722","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2721","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2720","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2719","description":"Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2717","description":"Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Corporate Lending accessible data as well as unauthorized read access to a subset of Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2716","description":"Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2715","description":"Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Corporate Lending accessible data as well as unauthorized read access to a subset of Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2714","description":"Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Banking Payments accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2712","description":"Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Payments accessible data as well as unauthorized read access to a subset of Oracle Banking Payments accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2711","description":"Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Payments accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2710","description":"Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Payments accessible data as well as unauthorized read access to a subset of Oracle Banking Payments accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2709","description":"Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Learner Pages). The supported version that is affected is 6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iLearning. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iLearning, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iLearning accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2707","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: WebAccess). Supported versions that are affected are 15.1.0.0-15.2.18.7, 16.1.0.0-16.2.19.0, 17.1.0.0-17.12.16.0, 18.1.0.0-18.8.16.0 and 19.12.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2700","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2697","description":"Vulnerability in the Oracle Hospitality Suites Management component of Oracle Food and Beverage Applications. Supported versions that are affected are 3.7 and 3.8. Easily exploitable vulnerability allows physical access to compromise Oracle Hospitality Suites Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Suites Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality Suites Management accessible data. CVSS 3.0 Base Score 4.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2695","description":"Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Approval Framework). Supported versions that are affected are 9.1 and 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise CC Common Application Objects accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2687","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2685","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2684","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2683","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2677","description":"Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 accessible data. CVSS 3.0 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2676","description":"Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Printing). The supported version that is affected is 5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality OPERA 5, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality OPERA 5 accessible data as well as unauthorized read access to a subset of Oracle Hospitality OPERA 5 accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2668","description":"Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iSupport, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iSupport accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2667","description":"Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iSupport, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iSupport accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2666","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2663","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2657","description":"Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2650","description":"Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Promotions). The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Customer Management and Segmentation Foundation accessible data as well as unauthorized read access to a subset of Oracle Retail Customer Management and Segmentation Foundation accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2648","description":"Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Internal Operations). The supported version that is affected is 16.0. Easily exploitable vulnerability allows physical access to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in takeover of Oracle Retail Customer Management and Segmentation Foundation. CVSS 3.0 Base Score 6.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2646","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Command Line Interface). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Enterprise Manager Base Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data as well as unauthorized read access to a subset of Enterprise Manager Base Platform accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2645","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2644","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2643","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2642","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2641","description":"Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Discovery Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager for Oracle Database. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager for Oracle Database accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager for Oracle Database accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager for Oracle Database. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2640","description":"Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Target Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager for Oracle Database. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager for Oracle Database accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager for Oracle Database accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager for Oracle Database. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2639","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2638","description":"Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager for Oracle Database. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager for Oracle Database accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager for Oracle Database accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager for Oracle Database. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2637","description":"Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Change Manager - web based). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager for Oracle Database. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager for Oracle Database accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager for Oracle Database accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager for Oracle Database. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2636","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2635","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: System Monitoring). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2634","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Configuration Standard Framewk). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2633","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2632","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: System Monitoring). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2631","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2630","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2629","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2628","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2626","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Cloud Control Manager - OMS). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2625","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2624","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2623","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metrics Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2622","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2621","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2620","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2619","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2618","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2617","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2616","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Repository). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2615","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2614","description":"Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: APM Mesh). Supported versions that are affected are 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager for Fusion Middleware. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager for Fusion Middleware accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager for Fusion Middleware accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager for Fusion Middleware. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2613","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Global EM Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2612","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2611","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2610","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2609","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data as well as unauthorized read access to a subset of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2608","description":"Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Repository). Supported versions that are affected are 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2607","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2606","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2603","description":"Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Field Service. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Field Service, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Field Service accessible data as well as unauthorized read access to a subset of Oracle Field Service accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2602","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tree Manager). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2601","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2600","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2599","description":"Vulnerability in the Oracle Hospitality Cruise Materials Management product of Oracle Hospitality Applications (component: MMS All). The supported version that is affected is 7.30.567. Difficult to exploit vulnerability allows physical access to compromise Oracle Hospitality Cruise Materials Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Cruise Materials Management accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2598","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Activity Guide). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2597","description":"Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Call Phone Number Page). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2596","description":"Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Message Hooks). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2595","description":"Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: GraalVM Compiler). The supported version that is affected is 19.3.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GraalVM Enterprise Edition accessible data. CVSS 3.0 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2593","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2020-2585","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2581","description":"Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM Interpreter). The supported version that is affected is 19.3.0.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle GraalVM Enterprise Edition executes to compromise Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM Enterprise Edition. CVSS 3.0 Base Score 4.0 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2567","description":"Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Security). The supported version that is affected is 18.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Retail Customer Management and Segmentation Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Customer Management and Segmentation Foundation accessible data as well as unauthorized read access to a subset of Oracle Retail Customer Management and Segmentation Foundation accessible data. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2566","description":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2564","description":"Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 19.10 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2563","description":"Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion (component: Close Manager). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Hyperion Financial Close Management accessible data. CVSS 3.0 Base Score 4.2 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2561","description":"Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Company Dir / Org Chart Viewer). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2560","description":"Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server). Supported versions that are affected are 19.10 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2559","description":"Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: UIF Open UI). Supported versions that are affected are 19.7 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2557","description":"Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Security). Supported versions that are affected are 12.2.4, 12.2.4.1, 12.2.5 and 12.2.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Demantra Demand Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Demantra Demand Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Demantra Demand Management accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2552","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2550","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle WebLogic Server executes to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data as well as unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2548","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2547","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2545","description":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle HTTP Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2544","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2539","description":"Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2535","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2534","description":"Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Reports Developer accessible data as well as unauthorized read access to a subset of Oracle Reports Developer accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2533","description":"Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Reports Developer accessible data as well as unauthorized read access to a subset of Oracle Reports Developer accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2530","description":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle HTTP Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HTTP Server accessible data as well as unauthorized read access to a subset of Oracle HTTP Server accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2519","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2020-2096","description":"Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a reflected XSS vulnerability.","exploit_maturity":"Working exploit published","published":"2020-01-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2020-2095","description":"Jenkins Redgate SQL Change Automation Plugin 2.0.4 and earlier stored an API key unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-2094","description":"A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient.","exploit_maturity":"No public exploit","published":"2020-01-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-20366","description":"An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via isTrustStore to Manage Store Contents.","exploit_maturity":"No public exploit","published":"2020-01-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-14820","description":"It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterConstants, which can be invoked via a specially-crafted URL. This vulnerability could allow an attacker to access unauthorized information.","exploit_maturity":"No public exploit","published":"2020-01-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2020-5497","description":"The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsanitized. This is related to header.tag. The issue can be exploited to execute arbitrary JavaScript.","exploit_maturity":"No public exploit","published":"2020-01-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-14863","description":"There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.","exploit_maturity":"No public exploit","published":"2020-01-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0245","description":"It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For a specific WSRP endpoint, under high-concurrency scenarios or scenarios where SOAP messages take long to execute, it was possible for an unauthenticated remote attacker to gain privileged information if WS-Security is enabled for the WSRP Consumer, and the endpoint in question is being used by a privileged user. This affects JBoss Portal 6.2.0.","exploit_maturity":"No public exploit","published":"2020-01-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-0169","description":"In JBoss EAP 6 a security domain is configured to use a cache that is shared between all applications that are in the security domain. This could allow an authenticated user in one application to access protected resources in another application without proper authorization. Although this is an intended functionality, it was not clearly documented which can mislead users into thinking that a security domain cache is isolated to a single application.","exploit_maturity":"No public exploit","published":"2020-01-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-6035","description":"Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page.","exploit_maturity":"No public exploit","published":"2019-12-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-1000229","description":"swagger-ui has XSS in key names","exploit_maturity":"No public exploit","published":"2019-12-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-16576","description":"A missing permission check in Jenkins Alauda Kubernetes Suport Plugin 2.3.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing the Kubernetes service account token or credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16574","description":"A missing permission check in Jenkins Alauda DevOps Pipeline Plugin 2.3.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16572","description":"Jenkins Weibo Plugin 1.0.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16571","description":"A missing permission check in Jenkins RapidDeploy Plugin 4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16569","description":"A cross-site request forgery vulnerability in Jenkins Mantis Plugin 0.26 and earlier allows attackers to connect to an attacker-specified web server using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16568","description":"Jenkins SCTMExecutor Plugin 2.2 and earlier transmits previously configured service credentials in plain text as part of the global configuration, as well as individual jobs' configurations.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16567","description":"A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16566","description":"A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16564","description":"Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to affects view content such as job display name or pipeline stage names.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16563","description":"Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16562","description":"Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16559","description":"A missing permission check in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers with Overall/Read permission to perform connection tests and determine whether files with an attacker-specified path exist on the Jenkins master file system.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16557","description":"Jenkins Redgate SQL Change Automation Plugin 2.0.3 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16556","description":"Jenkins Rundeck Plugin 3.6.5 and earlier stores credentials unencrypted in its global configuration file and in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16555","description":"A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier was processed in a way that wasn't interruptible, allowing attackers to have Jenkins evaluate a regular expression without the ability to interrupt this process.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16554","description":"A missing permission check in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers with Overall/Read permission to have Jenkins evaluate a computationally expensive regular expression.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16552","description":"A missing permission check in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials, or determine the existence of a file with a given path on the Jenkins master.","exploit_maturity":"No public exploit","published":"2019-12-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3652","description":"JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL.","exploit_maturity":"No public exploit","published":"2019-12-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-6495","description":"JBossWeb Bayeux has reflected XSS","exploit_maturity":"No public exploit","published":"2019-12-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-4663","description":"IBM WebSphere Application Server - Liberty is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171245.","exploit_maturity":"No public exploit","published":"2019-12-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-19703","description":"In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location.","exploit_maturity":"No public exploit","published":"2019-12-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3656","description":"JBoss KeyCloak: XSS in login-status-iframe.html","exploit_maturity":"No public exploit","published":"2019-12-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16771","description":"Versions of Armeria 0.85.0 through and including 0.96.0 are vulnerable to HTTP response splitting, which allows remote attackers to inject arbitrary HTTP headers via CRLF sequences when unsanitized data is used to populate the headers of an HTTP response. This vulnerability has been patched in 0.97.0. Potential impacts of this vulnerability include cross-user defacement, cache poisoning, Cross-site scripting (XSS), and page hijacking.","exploit_maturity":"No public exploit","published":"2019-12-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-17554","description":"The XML content type entity deserializer in Apache Olingo versions 4.0.0 to 4.6.0 is not configured to deny the resolution of external entities. Request with content type \"application/xml\", which trigger the deserialization of entities, can be used to trigger XXE attacks.","exploit_maturity":"Working exploit published","published":"2019-12-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-17632","description":"In Eclipse Jetty versions 9.4.21.v20190926, 9.4.22.v20191022, and 9.4.23.v20191118, the generation of default unhandled Error response content (in text/html and text/json Content-Type) does not escape Exception messages in stacktraces included in error output.","exploit_maturity":"No public exploit","published":"2019-11-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-1780","description":"oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data-center","exploit_maturity":"No public exploit","published":"2019-11-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16543","description":"Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-11-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16542","description":"Jenkins Anchore Container Image Scanner Plugin 1.0.19 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-11-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16540","description":"A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete arbitrary files on the Jenkins master.","exploit_maturity":"No public exploit","published":"2019-11-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-16539","description":"A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete support bundles.","exploit_maturity":"No public exploit","published":"2019-11-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10083","description":"When updating a Process Group via the API in NiFi versions 1.3.0 to 1.9.2, the response to the request includes all of its contents (at the top most level, not recursively). The response included details about processors and controller services which the user may not have had read access to.","exploit_maturity":"No public exploit","published":"2019-11-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10080","description":"The XMLFileLookupService in NiFi versions 1.3.0 to 1.9.2 allowed trusted users to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services (via XXE) and reveal information such as the versions of Java, Jersey, and Apache that the NiFI instance uses.","exploit_maturity":"No public exploit","published":"2019-11-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-10070","description":"Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality","exploit_maturity":"No public exploit","published":"2019-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-4441","description":"Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin.","exploit_maturity":"No public exploit","published":"2019-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-4440","description":"Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin.","exploit_maturity":"No public exploit","published":"2019-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-4439","description":"Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that points to Jenkins.","exploit_maturity":"No public exploit","published":"2019-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-19040","description":"KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '\"sampling\":{\"value\":\"\u003cscript\u003e' substring.","exploit_maturity":"No public exploit","published":"2019-11-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-3641","description":"Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.","exploit_maturity":"No public exploit","published":"2019-11-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-3655","description":"JBoss KeyCloak is vulnerable to soft token deletion via CSRF","exploit_maturity":"No public exploit","published":"2019-11-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3599","description":"HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy","exploit_maturity":"No public exploit","published":"2019-11-12","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2010-3857","description":"JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter.","exploit_maturity":"No public exploit","published":"2019-11-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10219","description":"A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.","exploit_maturity":"No public exploit","published":"2019-11-08","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2008-5083","description":"In JON 2.1.x before 2.1.2 SP1, users can obtain unauthorized security information about private resources managed by JBoss ON.","exploit_maturity":"No public exploit","published":"2019-11-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-12406","description":"Apache CXF before 3.3.4 and 3.2.11 does not restrict the number of message attachments present in a given message. This leaves open the possibility of a denial of service type attack, where a malicious user crafts a message containing a very large number of message attachments. From the 3.3.4 and 3.2.11 releases, a default limit of 50 message attachments is enforced. This is configurable via the message property \"attachment-max-count\".","exploit_maturity":"No public exploit","published":"2019-11-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-5046","description":"JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22.","exploit_maturity":"No public exploit","published":"2019-11-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5123","description":"The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.","exploit_maturity":"Working exploit published","published":"2019-11-05","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-7619","description":"Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service. An unauthenticated attacker could send a specially crafted request and determine if a username exists in the Elasticsearch native realm.","exploit_maturity":"No public exploit","published":"2019-10-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-18393","description":"PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability.","exploit_maturity":"Working exploit published","published":"2019-10-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-12415","description":"In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Processing.","exploit_maturity":"No public exploit","published":"2019-10-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-10475","description":"A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin.","exploit_maturity":"Working exploit published","published":"2019-10-23","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-10474","description":"A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on the Jenkins master file system.","exploit_maturity":"No public exploit","published":"2019-10-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10473","description":"A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-10-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10472","description":"A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-10-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10470","description":"A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-10-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10469","description":"A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-10-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10467","description":"Jenkins Sonar Gerrit Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-10-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10465","description":"A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file system.","exploit_maturity":"No public exploit","published":"2019-10-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10463","description":"A missing permission check in Jenkins Dynatrace Application Monitoring Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2019-10-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10459","description":"Jenkins Mattermost Notification Plugin 2.7.0 and earlier stored webhook URLs containing a secret token unencrypted in its global configuration file and job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-10-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-3027","description":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Login Help). Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Application Object Library. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-3024","description":"Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Installed Base, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-3023","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Stylesheet). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-3022","description":"Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Content). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Content Manager. While the vulnerability is in Oracle Content Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Content Manager accessible data. CVSS 3.0 Base Score 5.8 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-3019","description":"Vulnerability in the Oracle Banking Digital Experience product of Oracle Financial Services Applications (component: Loan Calculator). Supported versions that are affected are 18.1, 18.2, 18.3 and 19.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Digital Experience. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Banking Digital Experience, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Digital Experience accessible data as well as unauthorized read access to a subset of Oracle Banking Digital Experience accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-3015","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-3014","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Performance Monitor). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-3012","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-3001","description":"Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise SCM eProcurement accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2999","description":"Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2019-2989","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS v3.0 Base Score 6.8 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-2985","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2980","description":"Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: eMail). Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2979","description":"Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Payments). Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.0 Base Score 5.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2977","description":"Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.8 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2019-2976","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 17.1.0-17.12.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2975","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-2959","description":"Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Security Models). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Reporting. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Hyperion Financial Reporting accessible data. CVSS 3.0 Base Score 4.2 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2958","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-2952","description":"Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2951","description":"Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: US Federal Specific). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2949","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2019-2943","description":"Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Studio). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data Integrator. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Data Integrator accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2941","description":"Vulnerability in the Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Modeling). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Profitability and Cost Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Hyperion Profitability and Cost Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hyperion Profitability and Cost Management accessible data as well as unauthorized read access to a subset of Hyperion Profitability and Cost Management accessible data. CVSS 3.0 Base Score 4.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2936","description":"Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Difficult to exploit vulnerability allows low privileged attacker having Admin - Configuration privilege with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized access to critical data or complete access to all Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2935","description":"Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 19.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2931","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2930","description":"Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Field Service. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Field Service, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Field Service accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2929","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2927","description":"Vulnerability in the Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and Security). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Data Relationship Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Hyperion Data Relationship Management. CVSS 3.0 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2925","description":"Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Workflow accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2915","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2898","description":"Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion Middleware (component: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher (formerly XML Publisher). Successful attacks of this vulnerability can result in unauthorized read access to a subset of BI Publisher (formerly XML Publisher) accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2897","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2896","description":"Vulnerability in the MICROS Relate CRM Software product of Oracle Retail Applications (component: Internal Operations). Supported versions that are affected are 7.1.0, 15.0.0, 16.0.0, 17.0.0, and 18.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Relate CRM Software. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MICROS Relate CRM Software accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2889","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2888","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: EJB Container). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"Proof of concept only","published":"2019-10-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-2887","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2886","description":"Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Services). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Forms, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Forms accessible data as well as unauthorized read access to a subset of Oracle Forms accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2884","description":"Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment). The supported version that is affected is 17.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Retail Customer Management and Segmentation Foundation accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2883","description":"Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment). The supported version that is affected is 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Customer Management and Segmentation Foundation accessible data as well as unauthorized read access to a subset of Oracle Retail Customer Management and Segmentation Foundation accessible data. CVSS 3.0 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-10457","description":"A missing permission check in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10456","description":"A cross-site request forgery vulnerability in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10455","description":"A missing permission check in Jenkins Rundeck Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10454","description":"A cross-site request forgery vulnerability in Jenkins Rundeck Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10452","description":"Jenkins View26 Test-Reporting Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10451","description":"Jenkins SOASTA CloudTest Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10447","description":"Jenkins Sofy.AI Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10445","description":"A missing permission check in Jenkins Google Kubernetes Engine Plugin 0.7.0 and earlier allowed attackers with Overall/Read permission to obtain limited information about the scope of a credential with an attacker-specified credentials ID.","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10444","description":"Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM.","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10442","description":"A missing permission check in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10441","description":"A cross-site request forgery vulnerability in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10439","description":"A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier in various 'doFillCredentialsIdItems' methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10438","description":"A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10436","description":"An arbitrary file read vulnerability in Jenkins Google OAuth Credentials Plugin 0.9 and earlier allowed attackers able to configure jobs and credentials in Jenkins to obtain the contents of any file on the Jenkins master.","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-3300","description":"Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Internal Operations). The supported version that is affected is 7.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Xstore Office. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Xstore Office accessible data as well as unauthorized read access to a subset of Oracle Retail Xstore Office accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-14838","description":"A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server","exploit_maturity":"No public exploit","published":"2019-10-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-4441","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 163177.","exploit_maturity":"No public exploit","published":"2019-10-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-15165","description":"sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.","exploit_maturity":"No public exploit","published":"2019-10-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-17091","description":"faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.","exploit_maturity":"No public exploit","published":"2019-10-02","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-10432","description":"Jenkins HTML Publisher Plugin 1.20 and earlier did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those.","exploit_maturity":"No public exploit","published":"2019-10-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-4305","description":"IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information caused by the improper setting of a cookie. IBM X-Force ID: 160951.","exploit_maturity":"No public exploit","published":"2019-09-30","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-4304","description":"IBM WebSphere Application Server - Liberty could allow a remote attacker to bypass security restrictions caused by improper session validation. IBM X-Force ID: 160950.","exploit_maturity":"No public exploit","published":"2019-09-30","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-10430","description":"Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10429","description":"Jenkins GitLab Logo Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10427","description":"Jenkins Aqua MicroScanner Plugin 1.0.7 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10426","description":"Jenkins Gem Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10424","description":"Jenkins elOyente Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10423","description":"Jenkins CodeScan Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10422","description":"Jenkins Call Remote Job Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10420","description":"Jenkins Assembla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10419","description":"Jenkins vFabric Application Director Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10416","description":"Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10415","description":"Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10414","description":"Jenkins Git Changelog Plugin 2.17 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10413","description":"Jenkins Data Theorem: CI/CD Plugin 1.3 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10410","description":"Jenkins Log Parser Plugin 2.0 and earlier did not escape an error message, resulting in a cross-site scripting vulnerability exploitable by users able to define log parsing rules.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10409","description":"A missing permission check in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers with Overall/Read permission to trigger project generation from templates.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10408","description":"A cross-site request forgery vulnerability in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers to trigger project generation from templates.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10407","description":"Jenkins Project Inheritance Plugin 2.0.0 and earlier displayed a list of environment variables passed to a build without masking sensitive variables contributed by the Mask Passwords Plugin.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10406","description":"Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not restrict or filter values set as Jenkins URL in the global configuration, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10405","description":"Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the \"Cookie\" HTTP request header on the /whoAmI/ URL, allowing attackers exploiting another XSS vulnerability to obtain the HTTP session cookie despite it being marked HttpOnly.","exploit_maturity":"Working exploit published","published":"2019-09-25","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-10404","description":"Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the reason why a queue items is blcoked in tooltips, resulting in a stored XSS vulnerability exploitable by users able to control parts of the reason a queue item is blocked, such as label expressions not matching any idle executors.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10403","description":"Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the SCM tag name on the tooltip for SCM tag actions, resulting in a stored XSS vulnerability exploitable by users able to control SCM tag names for these actions.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10402","description":"In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:combobox form control interpreted its item labels as HTML, resulting in a stored XSS vulnerability exploitable by users with permission to define its contents.","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10401","description":"In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:expandableTextBox form control interpreted its content as HTML when expanded, resulting in a stored XSS vulnerability exploitable by users with permission to define its contents (typically Job/Configure).","exploit_maturity":"No public exploit","published":"2019-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-12407","description":"On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.","exploit_maturity":"No public exploit","published":"2019-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-12404","description":"On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoContent.jsp, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.","exploit_maturity":"No public exploit","published":"2019-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10755","description":"The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. This issue only affects the 3.X release of pac4j-saml.","exploit_maturity":"No public exploit","published":"2019-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10090","description":"On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.","exploit_maturity":"No public exploit","published":"2019-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10089","description":"On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.","exploit_maturity":"No public exploit","published":"2019-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10087","description":"On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.","exploit_maturity":"No public exploit","published":"2019-09-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-4505","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Network Deployment could allow a remote attacker to obtain sensitive information, caused by sending a specially-crafted URL. This can lead the attacker to view any file in a certain directory. IBM X-Force ID: 164364.","exploit_maturity":"No public exploit","published":"2019-09-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-3739","description":"RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.","exploit_maturity":"No public exploit","published":"2019-09-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-3738","description":"RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key.","exploit_maturity":"No public exploit","published":"2019-09-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-4477","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a user with access to audit logs to obtain sensitive information, caused by improper handling of command line options. IBM X-Force ID: 163997.","exploit_maturity":"No public exploit","published":"2019-09-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-4442","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9,0 could allow a remote attacker to traverse directories on the file system. An attacker could send a specially-crafted URL request to view arbitrary files on the system but not content. IBM X-Force ID: 163226.","exploit_maturity":"No public exploit","published":"2019-09-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-4268","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL containing \"dot dot\" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 160201.","exploit_maturity":"No public exploit","published":"2019-09-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-16370","description":"The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900.","exploit_maturity":"No public exploit","published":"2019-09-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10400","description":"A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts.","exploit_maturity":"No public exploit","published":"2019-09-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10399","description":"A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions in increment and decrement expressions allowed attackers to execute arbitrary code in sandboxed scripts.","exploit_maturity":"No public exploit","published":"2019-09-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10398","description":"Jenkins Beaker Builder Plugin 1.9 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-09-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10396","description":"Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting vulnerability exploitable by users able to change build descriptions.","exploit_maturity":"No public exploit","published":"2019-09-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10395","description":"Jenkins Build Environment Plugin 1.6 and earlier did not escape variables shown on its views, resulting in a cross-site scripting vulnerability in Jenkins 2.145, 2.138.1, or older, exploitable by users able to change various job/build properties.","exploit_maturity":"No public exploit","published":"2019-09-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10394","description":"A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions on the left-hand side of assignment expressions allowed attackers to execute arbitrary code in sandboxed scripts.","exploit_maturity":"No public exploit","published":"2019-09-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10393","description":"A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts.","exploit_maturity":"No public exploit","published":"2019-09-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16168","description":"In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a \"severe division by zero in the query planner.\"","exploit_maturity":"No public exploit","published":"2019-09-09","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2019-16148","description":"Sakai through 12.6 allows XSS via a chat user name.","exploit_maturity":"No public exploit","published":"2019-09-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-16147","description":"Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib.","exploit_maturity":"No public exploit","published":"2019-09-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10753","description":"In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version 9.4.4 for eclipse-cdt, and all versions prior to version 3.0.1 for eclipse-groovy, Spotless was resolving dependencies over an insecure channel (http). If the build occurred over an insecure connection, a malicious user could have perform a Man-in-the-Middle attack during the build and alter the build artifacts that were produced. In case that any of these artifacts were compromised, any developers using these could be altered. **Note:** In order to validate that this artifact was not compromised, the maintainer would need to confirm that none of the artifacts published to the registry were not altered with. Until this happens, we can not guarantee that this artifact was not compromised even though the probability that this happened is low.","exploit_maturity":"No public exploit","published":"2019-09-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10391","description":"Jenkins IBM Application Security on Cloud Plugin 1.2.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2019-08-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-13237","description":"In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access server resources: clearhistory.jsp, convertxml.jsp, group_new.jsp, loginmessage.jsp, xmlcontentrepair.jsp, and /system/workplace/admin/history/settings/index.jsp.","exploit_maturity":"Working exploit published","published":"2019-08-27","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-13236","description":"In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface.","exploit_maturity":"Working exploit published","published":"2019-08-27","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-13235","description":"In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.","exploit_maturity":"Working exploit published","published":"2019-08-27","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-13234","description":"In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.","exploit_maturity":"Working exploit published","published":"2019-08-27","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-15488","description":"Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test.","exploit_maturity":"No public exploit","published":"2019-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-15477","description":"Jooby before 1.6.4 has XSS via the default error handler.","exploit_maturity":"No public exploit","published":"2019-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-12400","description":"In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader first, then this implementation might be cached and re-used by Apache Santuario - XML Security for Java, leading to potential security flaws when validating signed documents, etc. The vulnerability affects Apache Santuario - XML Security for Java 2.0.x releases from 2.0.3 and all 2.1.x releases before 2.1.4.","exploit_maturity":"No public exploit","published":"2019-08-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-12397","description":"Policy import functionality in Apache Ranger 0.7.0 to 1.2.0 is vulnerable to a cross-site scripting issue. Upgrade to 2.0.0 or later version of Apache Ranger with the fix.","exploit_maturity":"No public exploit","published":"2019-08-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10389","description":"A missing permission check in Jenkins Relution Enterprise Appstore Publisher Plugin 1.24 and earlier allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10388","description":"A cross-site request forgery vulnerability in Jenkins Relution Enterprise Appstore Publisher Plugin 1.24 and earlier allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10387","description":"A missing permission check in Jenkins XL TestView Plugin 1.2.0 and earlier in XLTestView.XLTestDescriptor#doTestConnection allows users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10385","description":"Jenkins eggPlant Plugin 2.2 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10378","description":"Jenkins TestLink Plugin 3.16 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10377","description":"A missing permission check in Jenkins Avatar Plugin 1.2 and earlier allows attackers with Overall/Read access to change the avatar of any user of Jenkins.","exploit_maturity":"No public exploit","published":"2019-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10375","description":"An arbitrary file read vulnerability in Jenkins File System SCM Plugin 2.1 and earlier allows attackers able to configure jobs in Jenkins to obtain the contents of any file on the Jenkins master.","exploit_maturity":"No public exploit","published":"2019-08-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-10372","description":"An open redirect vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows attackers to redirect users to a URL outside Jenkins after successful login.","exploit_maturity":"No public exploit","published":"2019-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10370","description":"Jenkins Mask Passwords Plugin 2.12.0 and earlier transmits globally configured passwords in plain text as part of the configuration form, potentially resulting in their exposure.","exploit_maturity":"No public exploit","published":"2019-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10369","description":"A missing permission check in Jenkins JClouds Plugin 2.14 and earlier in BlobStoreProfile.DescriptorImpl#doTestConnection and JCloudsCloud.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10367","description":"Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply masking to some values expected to be hidden when logging the configuration being applied.","exploit_maturity":"No public exploit","published":"2019-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10093","description":"In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later.","exploit_maturity":"No public exploit","published":"2019-08-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10366","description":"Jenkins Skytap Cloud CI Plugin 2.06 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10365","description":"Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token in the project workspace, where it could be accessed by users with Job/Read permission.","exploit_maturity":"No public exploit","published":"2019-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10364","description":"Jenkins Amazon EC2 Plugin 1.43 and earlier wrote the beginning of private keys to the Jenkins system log.","exploit_maturity":"No public exploit","published":"2019-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10363","description":"Jenkins Configuration as Code Plugin 1.24 and earlier did not reliably identify sensitive values expected to be exported in their encrypted form.","exploit_maturity":"No public exploit","published":"2019-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10362","description":"Jenkins Configuration as Code Plugin 1.24 and earlier did not escape values resulting in variable interpolation during configuration import when exporting, allowing attackers with permission to change Jenkins system configuration to obtain the values of environment variables.","exploit_maturity":"No public exploit","published":"2019-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10361","description":"Jenkins Maven Release Plugin 0.14.0 and earlier stored credentials unencrypted on the Jenkins master where they could be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10360","description":"A stored cross site scripting vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier allowed attackers to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins.","exploit_maturity":"No public exploit","published":"2019-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10359","description":"A cross-site request forgery vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier in the M2ReleaseAction#doSubmit method allowed attackers to perform releases with attacker-specified options.","exploit_maturity":"No public exploit","published":"2019-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10358","description":"Jenkins Maven Integration Plugin 3.3 and earlier did not apply build log decorators to module builds, potentially revealing sensitive build variables in the build log.","exploit_maturity":"No public exploit","published":"2019-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10357","description":"A missing permission check in Jenkins Pipeline: Shared Groovy Libraries Plugin 2.14 and earlier allowed users with Overall/Read access to obtain limited information about the content of SCM repositories referenced by global libraries.","exploit_maturity":"No public exploit","published":"2019-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10345","description":"Jenkins Configuration as Code Plugin 1.20 and earlier did not treat the proxy password as a secret to be masked when logging or encrypted for export.","exploit_maturity":"No public exploit","published":"2019-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10344","description":"Missing permission checks in Jenkins Configuration as Code Plugin 1.24 and earlier in various HTTP endpoints allowed users with Overall/Read access to access the generated schema and documentation for this plugin containing detailed information about installed plugins.","exploit_maturity":"No public exploit","published":"2019-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-7614","description":"A race condition flaw was found in the response headers Elasticsearch versions before 7.2.1 and 6.8.2 returns to a request. On a system with multiple users submitting requests, it could be possible for an attacker to gain access to response header containing sensitive data from another user.","exploit_maturity":"No public exploit","published":"2019-07-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-4285","description":"IBM WebSphere Application Server - Liberty Admin Center could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could send a specially-crafted HTTP request to hijack the victim's click actions or launch other client-side browser attacks. IBM X-Force ID: 160513.","exploit_maturity":"No public exploit","published":"2019-07-30","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-13057","description":"An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)","exploit_maturity":"No public exploit","published":"2019-07-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2862","description":"Vulnerability in the Oracle GraalVM Enterprise Edition component of Oracle GraalVM (subcomponent: Java). The supported version that is affected is 19.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle GraalVM Enterprise Edition. CVSS 3.0 Base Score 6.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2861","description":"Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Security). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Planning. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Planning accessible data. CVSS 3.0 Base Score 4.2 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"Working exploit published","published":"2019-07-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-2858","description":"Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Identity Manager accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2857","description":"Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions that are affected are 19.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel UI Framework accessible data as well as unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2847","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2846","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2843","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2840","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2839","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2831","description":"Vulnerability in the PeopleSoft Enterprise FIN Project Costing component of Oracle PeopleSoft Products (subcomponent: Projects). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Project Costing. While the vulnerability is in PeopleSoft Enterprise FIN Project Costing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN Project Costing accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise FIN Project Costing. CVSS 3.0 Base Score 6.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2827","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data as well as unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2825","description":"Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2824","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data as well as unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2823","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 8.0.5-8.0.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2821","description":"Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2019-2817","description":"Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Folders, Files \u0026 Attachments). Supported versions that are affected are 9.3.3, 9.3.4, 9.3.5 and 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile PLM. CVSS 3.0 Base Score 5.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:L).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2816","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-2809","description":"Vulnerability in the Oracle iRecruitment component of Oracle E-Business Suite (subcomponent: Password Reset). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iRecruitment. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle iRecruitment. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2794","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2790","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2783","description":"Vulnerability in the Oracle Payments component of Oracle E-Business Suite (subcomponent: File Transmission). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payments. While the vulnerability is in Oracle Payments, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Payments accessible data. CVSS 3.0 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2781","description":"Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: XML Interface). Supported versions that are affected are 8.9.6, 8.10.2 and 8.11-8.14. Easily exploitable vulnerability allows low privileged attacker with network access via TCP/IP to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2779","description":"Vulnerability in the Siebel Core - Common Components component of Oracle Siebel CRM (subcomponent: Email). Supported versions that are affected are 19.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Core - Common Components. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Core - Common Components accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2777","description":"Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Search). Supported versions that are affected are 19.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Core - Server Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel Core - Server Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Core - Server Framework accessible data as well as unauthorized read access to a subset of Siebel Core - Server Framework accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2773","description":"Vulnerability in the Oracle Payments component of Oracle E-Business Suite (subcomponent: File Transmission). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payments. While the vulnerability is in Oracle Payments, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Payments accessible data. CVSS 3.0 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2772","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2770","description":"Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Smart View). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Planning. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Planning accessible data. CVSS 3.0 Base Score 4.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2769","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-2762","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-2751","description":"Vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: OHS Config MBeans). Supported versions that are affected are 12.1.3.0.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle HTTP Server accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2744","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2736","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Investor Servicing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2733","description":"Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). The supported version that is affected is 7.3.1.5.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demantra Demand Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Demantra Demand Management accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2732","description":"Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). The supported version that is affected is 7.3.1.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Demantra Demand Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Demantra Demand Management accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2728","description":"Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Networking). Supported versions that are affected are 12.3.3 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Ops Center. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Enterprise Manager Ops Center accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2599","description":"Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Pagelet Wizard). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-1010206","description":"OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing.","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-2883","description":"Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 7.0 and 7.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Xstore Office. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Xstore Office accessible data as well as unauthorized read access to a subset of Oracle Retail Xstore Office accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Xstore Office. CVSS 3.0 Base Score 5.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2019-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-1010241","description":"Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is: Authenticated users can recover credentials. The component is: config-variables.jelly line #30 (passwordVariable). The attack vector is: Attacker creates and executes a Jenkins job.","exploit_maturity":"No public exploit","published":"2019-07-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10354","description":"A vulnerability in the Stapler web framework used in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier allowed attackers to access view fragments directly, bypassing permission checks and possibly obtain sensitive information.","exploit_maturity":"No public exploit","published":"2019-07-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10352","description":"A path traversal vulnerability in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java allowed attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an arbitrary file write on the Jenkins master when scheduling a build.","exploit_maturity":"No public exploit","published":"2019-07-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-3619","description":"Information Disclosure vulnerability in the Agent Handler in McAfee ePolicy Orchestrator (ePO) 5.9.x and 5.10.0 prior to 5.10.0 update 4 allows remote unauthenticated attacker to view sensitive information in plain text via sniffing the traffic between the Agent Handler and the SQL server.","exploit_maturity":"No public exploit","published":"2019-07-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-13118","description":"In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.","exploit_maturity":"No public exploit","published":"2019-07-01","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2019-13117","description":"In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.","exploit_maturity":"No public exploit","published":"2019-07-01","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2019-12384","description":"FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible.","exploit_maturity":"Proof of concept only","published":"2019-06-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-15694","description":"When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions can modify internal cluster metadata. A malicious user could modify this data in a way that affects the operation of the cluster.","exploit_maturity":"No public exploit","published":"2019-06-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-12814","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the classpath, an attacker can send a specifically crafted JSON message that allows them to read arbitrary local files on the server.","exploit_maturity":"Proof of concept only","published":"2019-06-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-3875","description":"A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certificates through the CRL, where the CRL list can be obtained from the URL provided in the certificate itself (CDP) or through the separately configured path. The CRL are often available over the network through unsecured protocols ('http' or 'ldap') and hence the caller should verify the signature and possibly the certification path. Keycloak currently doesn't validate signatures on CRL, which can result in a possibility of various attacks like man-in-the-middle.","exploit_maturity":"No public exploit","published":"2019-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-3872","description":"It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Application Platform 7.2.x and 7.1.x. An attacker could use this to send a malicious script to achieve cross-site scripting and obtain unauthorized information or conduct further attacks.","exploit_maturity":"No public exploit","published":"2019-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-11269","description":"Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a request to the authorization endpoint using the authorization code grant type, and specify a manipulated redirection URI via the redirect_uri parameter. This can cause the authorization server to redirect the resource owner user-agent to a URI under the control of the attacker with the leaked authorization code.","exploit_maturity":"Working exploit published","published":"2019-06-12","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-10157","description":"It was found that Keycloak's Node.js adapter before version 4.8.3 did not properly verify the web token received from the server in its backchannel logout . An attacker with local access could use this to construct a malicious web token setting an NBF parameter that could prevent user access indefinitely.","exploit_maturity":"No public exploit","published":"2019-06-12","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-10336","description":"A reflected cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.6 and earlier allowed attackers able to control the output of the ElectricFlow API to inject arbitrary HTML and JavaScript in job configuration forms containing post-build steps provided by this plugin.","exploit_maturity":"No public exploit","published":"2019-06-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10335","description":"A stored cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier allowed attackers able to configure jobs in Jenkins or control the output of the ElectricFlow API to inject arbitrary HTML and JavaScript in the plugin-provided output on build status pages.","exploit_maturity":"No public exploit","published":"2019-06-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10334","description":"Jenkins ElectricFlow Plugin 1.1.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM when MultipartUtility.java is used to upload files.","exploit_maturity":"No public exploit","published":"2019-06-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10333","description":"Missing permission checks in Jenkins ElectricFlow Plugin 1.1.5 and earlier in various HTTP endpoints allowed users with Overall/Read access to obtain information about the Jenkins ElectricFlow Plugin configuration and configuration of connected ElectricFlow instances.","exploit_maturity":"No public exploit","published":"2019-06-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10332","description":"A missing permission check in Jenkins ElectricFlow Plugin 1.1.5 and earlier in Configuration#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2019-06-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10331","description":"A cross-site request forgery vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier in Configuration#doTestConnection allowed attackers to connect to an attacker-specified URL using attacker-specified credentials.","exploit_maturity":"No public exploit","published":"2019-06-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-12741","description":"XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafted URL. (This module is not generally used in production systems so the attack surface is expected to be low, but affected systems are recommended to upgrade immediately.)","exploit_maturity":"No public exploit","published":"2019-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-6588","description":"In Liferay Portal before 7.1 CE GA4, an XSS vulnerability exists in the SimpleCaptcha API when custom code passes unsanitized input into the \"url\" parameter of the JSP taglib call \u003cliferay-ui:captcha url=\"\u003c%= url %\u003e\" /\u003e or \u003cliferay-captcha:captcha url=\"\u003c%= url %\u003e\" /\u003e. Liferay Portal out-of-the-box behavior with no customizations is not vulnerable.","exploit_maturity":"Working exploit published","published":"2019-06-03","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-3802","description":"This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted example value is supplied.","exploit_maturity":"No public exploit","published":"2019-06-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10326","description":"A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds.","exploit_maturity":"No public exploit","published":"2019-05-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10324","description":"A cross-site request forgery vulnerability in Jenkins Artifactory Plugin 3.2.2 and earlier in ReleaseAction#doSubmit, GradleReleaseApiAction#doStaging, MavenReleaseApiAction#doStaging, and UnifiedPromoteBuildAction#doSubmit allowed attackers to schedule a release build, perform release staging for Gradle and Maven projects, and promote previously staged builds, respectively.","exploit_maturity":"No public exploit","published":"2019-05-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10323","description":"A missing permission check in Jenkins Artifactory Plugin 3.2.3 and earlier in various 'fillCredentialsIdItems' methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-05-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10322","description":"A missing permission check in Jenkins Artifactory Plugin 3.2.2 and earlier in ArtifactoryBuilder.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-05-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10321","description":"A cross-site request forgery vulnerability in Jenkins Artifactory Plugin 3.2.2 and earlier in ArtifactoryBuilder.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-05-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-0221","description":"The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be present in a production website.","exploit_maturity":"Working exploit published","published":"2019-05-28","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-2726","description":"Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Services Integration). The supported version that is affected is 12.3.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Ops Center. While the vulnerability is in Enterprise Manager Ops Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Enterprise Manager Ops Center. CVSS 3.0 Base Score 6.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2019-05-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-0201","description":"An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when retrieves the ACLs of the requested node and returns all information contained in the ACL Id field as plaintext string. DigestAuthenticationProvider overloads the Id field with the hash value that is used for user authentication. As a consequence, if Digest Authentication is in use, the unsalted hash value will be disclosed by getACL() request for unauthenticated or unprivileged users.","exploit_maturity":"No public exploit","published":"2019-05-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10320","description":"Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.","exploit_maturity":"No public exploit","published":"2019-05-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10078","description":"A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. Initial reporting indicated ReferredPagesPlugin, but further analysis showed that multiple plugins were vulnerable.","exploit_maturity":"No public exploit","published":"2019-05-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10077","description":"A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.","exploit_maturity":"No public exploit","published":"2019-05-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10076","description":"A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.","exploit_maturity":"No public exploit","published":"2019-05-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-0226","description":"Apache Karaf Config service provides a install method (via service or MBean) that could be used to travel in any directory and overwrite existing file. The vulnerability is low if the Karaf process user has limited permission on the filesystem. Any Apache Karaf version before 4.2.5 is impacted. User should upgrade to Apache Karaf 4.2.5 or later.","exploit_maturity":"No public exploit","published":"2019-05-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-11818","description":"Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp). This allows an attacker to insert arbitrary JavaScript as user input (First Name or Last Name), which will be executed whenever the affected snippet is loaded.","exploit_maturity":"No public exploit","published":"2019-05-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-3799","description":"Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead a directory traversal attack.","exploit_maturity":"Working exploit published","published":"2019-05-06","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-3797","description":"This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ‘startingWith’, ‘endingWith’ or ‘containing’ could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE expressions in manually defined queries could return unexpected results if the parameter values bound did not have escaped reserved characters properly.","exploit_maturity":"No public exploit","published":"2019-05-06","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-3805","description":"A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.","exploit_maturity":"No public exploit","published":"2019-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-8035","description":"This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC (\u003c= 2.2.2) which runs in the user's browser does not sufficiently filter user supplied inputs, which may result in unintended execution of user supplied javascript code.","exploit_maturity":"No public exploit","published":"2019-05-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10317","description":"Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.","exploit_maturity":"No public exploit","published":"2019-04-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10314","description":"Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM.","exploit_maturity":"No public exploit","published":"2019-04-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10312","description":"A missing permission check in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallation.TowerInstallationDescriptor#doFillTowerCredentialsIdItems method allowed attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-04-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10308","description":"A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method allowed attackers with Overall/Read permission to change the per-job default graph configuration for all users.","exploit_maturity":"No public exploit","published":"2019-04-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10307","description":"A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method allowed attackers to change the per-job default graph configuration for all users.","exploit_maturity":"No public exploit","published":"2019-04-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-0214","description":"In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.","exploit_maturity":"No public exploit","published":"2019-04-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-0213","description":"In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e. the logo URL. The vulnerability is considered as minor risk, as only users with admin role can change the configuration, or the communication between the browser and the Archiva server must be compromised.","exploit_maturity":"No public exploit","published":"2019-04-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-0186","description":"The input fields of the Apache Pluto \"Chat Room\" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XSS) attacks. Mitigation: * Uninstall the ChatRoomDemo war file - or - * migrate to version 3.1.0 of the chat-room-demo war file","exploit_maturity":"Working exploit published","published":"2019-04-26","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-2719","description":"Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM (subcomponent: Web Applications (InfoCenter)). Supported versions that are affected are 8.5.1.0 - 8.5.1.7, 8.6.0 and 8.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Knowledge accessible data as well as unauthorized read access to a subset of Oracle Knowledge accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2713","description":"Vulnerability in the Oracle Commerce Merchandising component of Oracle Commerce (subcomponent: Asset Manager). The supported version that is affected is 11.2.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Merchandising. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Merchandising accessible data as well as unauthorized read access to a subset of Oracle Commerce Merchandising accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2712","description":"Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework). Supported versions that are affected are 11.2.0.3 and 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Platform accessible data as well as unauthorized read access to a subset of Oracle Commerce Platform accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2709","description":"Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 6.3.7, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Transportation Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Transportation Management accessible data as well as unauthorized read access to a subset of Oracle Transportation Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2707","description":"Vulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management component of Oracle PeopleSoft Products (subcomponent: Application Search). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise ELM Enterprise Learning Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise ELM Enterprise Learning Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise ELM Enterprise Learning Management accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise ELM Enterprise Learning Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2701","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). The supported version that is affected is 18.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2700","description":"Vulnerability in the PeopleSoft Enterprise ELM component of Oracle PeopleSoft Products (subcomponent: Enterprise Learning Mgmt). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise ELM. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise ELM accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2684","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-2676","description":"Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2674","description":"Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2673","description":"Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2670","description":"Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2669","description":"Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2659","description":"Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework). The supported version that is affected is 11.2.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Platform accessible data as well as unauthorized read access to a subset of Oracle Commerce Platform accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2637","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2629","description":"Vulnerability in the Oracle Health Sciences Data Management Workbench component of Oracle Health Sciences Applications (subcomponent: User Interface). The supported version that is affected is 2.4.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Health Sciences Data Management Workbench. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Health Sciences Data Management Workbench accessible data as well as unauthorized read access to a subset of Oracle Health Sciences Data Management Workbench accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2622","description":"Vulnerability in the Oracle Service Contracts component of Oracle E-Business Suite (subcomponent: Renewals). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service Contracts. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Service Contracts, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Service Contracts accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2621","description":"Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Object Library, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2618","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data as well as unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"Proof of concept only","published":"2019-04-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-2615","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-2597","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2594","description":"Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server). Supported versions that are affected are 8.55, 8.56 and 8.57. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise PT PeopleTools accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2591","description":"Vulnerability in the PeopleSoft Enterprise HRMS component of Oracle PeopleSoft Products (subcomponent: Candidate Gateway). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise HRMS. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HRMS, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HRMS accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HRMS accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2588","description":"Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise BI Publisher (formerly XML Publisher). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher (formerly XML Publisher) accessible data. CVSS 3.0 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"Working exploit published","published":"2019-04-23","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-2586","description":"Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: RemoteCall). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2579","description":"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"Working exploit published","published":"2019-04-23","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-2576","description":"Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service Bus. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Service Bus. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2573","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Homepage \u0026 Navigation). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2572","description":"Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware (subcomponent: Fabric Layer). The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle SOA Suite accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2570","description":"Vulnerability in the Siebel Core - Server BizLogic Script component of Oracle Siebel CRM (subcomponent: Integration - Scripting). The supported version that is affected is 19.3. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Core - Server BizLogic Script. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Core - Server BizLogic Script accessible data as well as unauthorized read access to a subset of Siebel Core - Server BizLogic Script accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel Core - Server BizLogic Script. CVSS 3.0 Base Score 4.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2568","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.0 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2564","description":"Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2557","description":"Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for Web Apps). The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Testing Suite accessible data as well as unauthorized read access to a subset of Oracle Application Testing Suite accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Application Testing Suite. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3312","description":"Vulnerability in the Oracle Retail Customer Engagement component of Oracle Retail Applications (subcomponent: Segment). Supported versions that are affected are 16.0 and 17.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Retail Customer Engagement. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Retail Customer Engagement accessible data as well as unauthorized read access to a subset of Oracle Retail Customer Engagement accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Customer Engagement. CVSS 3.0 Base Score 5.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L).","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-1328","description":"Apache Zeppelin prior to 0.8.0 had a stored XSS issue via Note permissions. Issue reported by \"Josna Joseph\".","exploit_maturity":"No public exploit","published":"2019-04-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10247","description":"In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context.","exploit_maturity":"No public exploit","published":"2019-04-22","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-10246","description":"In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource directories.","exploit_maturity":"No public exploit","published":"2019-04-22","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-10241","description":"In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.","exploit_maturity":"No public exploit","published":"2019-04-22","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-10305","description":"A missing permission check in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10304","description":"A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-20200","description":"CertificatePinner.java in OkHttp 3.x through 3.12.0 allows man-in-the-middle attackers to bypass certificate pinning by changing SSLContext and the boolean values while hooking the application. NOTE: This id is disputed because some parties don't consider this is a vulnerability. Their rationale can be found in https://github.com/square/okhttp/issues/4967","exploit_maturity":"No public exploit","published":"2019-04-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-1003050","description":"The f:validateButton form control for the Jenkins UI did not properly escape job URLs in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, resulting in a cross-site scripting (XSS) vulnerability exploitable by users with the ability to control job names.","exploit_maturity":"No public exploit","published":"2019-04-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-3795","description":"Spring Security versions 4.2.x prior to 4.2.12, 5.0.x prior to 5.0.12, and 5.1.x prior to 5.1.5 contain an insecure randomness vulnerability when using SecureRandomFactoryBean#setSeed to configure a SecureRandom instance. In order to be impacted, an honest application must provide a seed and make the resulting random material available to an attacker for inspection.","exploit_maturity":"No public exploit","published":"2019-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10293","description":"A missing permission check in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10292","description":"A cross-site request forgery vulnerability in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10290","description":"A missing permission check in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpl#doValidateAPI form validation method allowed attackers with Overall/Read permission to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10289","description":"A cross-site request forgery vulnerability in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpl#doValidateAPI form validation method allowed attackers to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10279","description":"A missing permission check in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-10278","description":"A cross-site request forgery vulnerability in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003099","description":"A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003098","description":"A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method allows attackers to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003097","description":"Jenkins Crowd Integration Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003096","description":"Jenkins TestFairy Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003095","description":"Jenkins Perfecto Mobile Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003094","description":"Jenkins Open STF Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003093","description":"A missing permission check in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003092","description":"A cross-site request forgery vulnerability in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003091","description":"A missing permission check in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003090","description":"A cross-site request forgery vulnerability in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doValidate form validation method allows attackers to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003089","description":"Jenkins Upload to pgyer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003088","description":"Jenkins Fabric Beta Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003087","description":"A missing permission check in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003086","description":"A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003085","description":"A missing permission check in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptor#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003084","description":"A cross-site request forgery vulnerability in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptor#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003083","description":"A missing permission check in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003082","description":"A cross-site request forgery vulnerability in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003081","description":"A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003080","description":"A cross-site request forgery vulnerability in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003079","description":"A missing permission check in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003078","description":"A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003077","description":"A missing permission check in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doTestJdbcConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003076","description":"A cross-site request forgery vulnerability in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doTestJdbcConnection form validation method allows attackers to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003059","description":"A missing permission check in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginCheck method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003058","description":"A cross-site request forgery vulnerability in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginCheck method allows attackers to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3603","description":"The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.","exploit_maturity":"No public exploit","published":"2019-04-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-4080","description":"IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service, caused by improper parameter parsing. A remote attacker could exploit this to consume all available CPU resources. IBM X-Force ID: 157380.","exploit_maturity":"No public exploit","published":"2019-04-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-1003047","description":"A missing permission check in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-03-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003046","description":"A cross-site request forgery vulnerability in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers to initiate a connection to an attacker-specified server.","exploit_maturity":"No public exploit","published":"2019-03-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003045","description":"A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this plugin's configuration.","exploit_maturity":"No public exploit","published":"2019-03-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-0224","description":"In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else's browser; only on its own browser.","exploit_maturity":"No public exploit","published":"2019-03-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-10934","description":"A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users.","exploit_maturity":"No public exploit","published":"2019-03-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-0191","description":"Apache Karaf kar deployer reads .kar archives and extracts the paths from the \"repository/\" and \"resources/\" entries in the zip file. It then writes out the content of these paths to the Karaf repo and resources directories. However, it doesn't do any validation on the paths in the zip file. This means that a malicious user could craft a .kar file with \"..\" directory names and break out of the directories to write arbitrary content to the filesystem. This is the \"Zip-slip\" vulnerability - https://snyk.io/research/zip-slip-vulnerability. This vulnerability is low if the Karaf process user has limited permission on the filesystem. Any Apache Karaf releases prior 4.2.3 is impacted.","exploit_maturity":"No public exploit","published":"2019-03-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-9658","description":"Checkstyle before 8.18 loads external DTDs by default.","exploit_maturity":"No public exploit","published":"2019-03-11","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1902","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to spoof connection information which could be used to launch further attacks against the system. IBM X-Force ID: 152531.","exploit_maturity":"No public exploit","published":"2019-03-11","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-1003037","description":"An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-03-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003036","description":"A data modification vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgent.java that allows attackers with Overall/Read permission to attach a public IP address to an Azure VM agent.","exploit_maturity":"No public exploit","published":"2019-03-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003035","description":"An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.","exploit_maturity":"No public exploit","published":"2019-03-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-3778","description":"Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a request to the authorization endpoint using the authorization code grant type, and specify a manipulated redirection URI via the \"redirect_uri\" parameter. This can cause the authorization server to redirect the resource owner user-agent to a URI under the control of the attacker with the leaked authorization code. This vulnerability exposes applications that meet all of the following requirements: Act in the role of an Authorization Server (e.g. @EnableAuthorizationServer) and uses the DefaultRedirectResolver in the AuthorizationEndpoint. This vulnerability does not expose applications that: Act in the role of an Authorization Server and uses a different RedirectResolver implementation other than DefaultRedirectResolver, act in the role of a Resource Server only (e.g. @EnableResourceServer), act in the role of a Client only (e.g. @EnableOAuthClient).","exploit_maturity":"Working exploit published","published":"2019-03-07","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-9142","description":"An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java.","exploit_maturity":"No public exploit","published":"2019-02-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003028","description":"A server-side request forgery vulnerability exists in Jenkins JMS Messaging Plugin 1.1.1 and earlier in SSLCertificateAuthenticationMethod.java, UsernameAuthenticationMethod.java that allows attackers with Overall/Read permission to have Jenkins connect to a JMS endpoint.","exploit_maturity":"No public exploit","published":"2019-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003027","description":"A server-side request forgery vulnerability exists in Jenkins OctopusDeploy Plugin 1.8.1 and earlier in OctopusDeployPlugin.java that allows attackers with Overall/Read permission to have Jenkins connect to an attacker-specified URL and obtain the HTTP response code if successful, and exception error message otherwise.","exploit_maturity":"No public exploit","published":"2019-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003026","description":"A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 and earlier in MattermostNotifier.java that allows attackers with Overall/Read permission to have Jenkins connect to an attacker-specified Mattermost server and room and send a message.","exploit_maturity":"No public exploit","published":"2019-02-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1996","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security, caused by the improper TLS configuration. A remote attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 154650.","exploit_maturity":"No public exploit","published":"2019-02-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-20242","description":"A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.","exploit_maturity":"No public exploit","published":"2019-02-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003023","description":"A cross-site scripting vulnerability exists in Jenkins Warnings Next Generation Plugin 1.0.1 and earlier in src/main/java/io/jenkins/plugins/analysis/core/model/DetailsTableModel.java, src/main/java/io/jenkins/plugins/analysis/core/model/SourceDetail.java, src/main/java/io/jenkins/plugins/analysis/core/model/SourcePrinter.java, src/main/java/io/jenkins/plugins/analysis/core/util/Sanitizer.java, src/main/java/io/jenkins/plugins/analysis/warnings/DuplicateCodeScanner.java that allows attackers with the ability to control warnings parser input to have Jenkins render arbitrary HTML.","exploit_maturity":"No public exploit","published":"2019-02-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003022","description":"A denial of service vulnerability exists in Jenkins Monitoring Plugin 1.74.0 and earlier in PluginImpl.java that allows attackers to kill threads running on the Jenkins master.","exploit_maturity":"No public exploit","published":"2019-02-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003021","description":"An exposure of sensitive information vulnerability exists in Jenkins OpenId Connect Authentication Plugin 1.4 and earlier in OicSecurityRealm/config.jelly that allows attackers able to view a Jenkins administrator's web browser output, or control the browser (e.g. malicious extension) to retrieve the configured client secret.","exploit_maturity":"No public exploit","published":"2019-02-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003020","description":"A server-side request forgery vulnerability exists in Jenkins Kanboard Plugin 1.5.10 and earlier in KanboardGlobalConfiguration.java that allows attackers with Overall/Read permission to submit a GET request to an attacker-specified URL.","exploit_maturity":"No public exploit","published":"2019-02-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003019","description":"An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session.","exploit_maturity":"No public exploit","published":"2019-02-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003018","description":"An exposure of sensitive information vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm/config.jelly that allows attackers able to view a Jenkins administrator's web browser output, or control the browser (e.g. malicious extension) to retrieve the configured client secret.","exploit_maturity":"No public exploit","published":"2019-02-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003017","description":"A data modification vulnerability exists in Jenkins Job Import Plugin 3.0 and earlier in JobImportAction.java that allows attackers to copy jobs from a preconfigured other Jenkins instance, potentially installing additional plugins necessary to load the imported job's configuration.","exploit_maturity":"No public exploit","published":"2019-02-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003014","description":"An cross-site scripting vulnerability exists in Jenkins Config File Provider Plugin 3.4.1 and earlier in src/main/resources/lib/configfiles/configfiles.jelly that allows attackers with permission to define shared configuration files to execute arbitrary JavaScript when a user attempts to delete the shared configuration file.","exploit_maturity":"No public exploit","published":"2019-02-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003013","description":"An cross-site scripting vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/Export.java, blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/export/ExportConfig.java, blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/export/JSONDataWriter.java, blueocean-rest-impl/src/main/java/io/jenkins/blueocean/service/embedded/UserStatePreloader.java, blueocean-web/src/main/resources/io/jenkins/blueocean/PageStatePreloadDecorator/header.jelly that allows attackers with permission to edit a user's description in Jenkins to have Blue Ocean render arbitrary HTML when using it as that user.","exploit_maturity":"No public exploit","published":"2019-02-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003012","description":"A data modification vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-core-js/src/js/bundleStartup.js, blueocean-core-js/src/js/fetch.ts, blueocean-core-js/src/js/i18n/i18n.js, blueocean-core-js/src/js/urlconfig.js, blueocean-rest/src/main/java/io/jenkins/blueocean/rest/APICrumbExclusion.java, blueocean-web/src/main/java/io/jenkins/blueocean/BlueOceanUI.java, blueocean-web/src/main/resources/io/jenkins/blueocean/BlueOceanUI/index.jelly that allows attackers to bypass all cross-site request forgery protection in Blue Ocean API.","exploit_maturity":"No public exploit","published":"2019-02-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-1003010","description":"A cross-site request forgery vulnerability exists in Jenkins Git Plugin 3.9.1 and earlier in src/main/java/hudson/plugins/git/GitTagAction.java that allows attackers to create a Git tag in a workspace and attach corresponding metadata to a build record.","exploit_maturity":"No public exploit","published":"2019-02-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2019-7317","description":"png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.","exploit_maturity":"No public exploit","published":"2019-02-04","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2019-6804","description":"An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/execution/_wfitemEdit.gsp.","exploit_maturity":"Working exploit published","published":"2019-01-25","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2018-1000997","description":"A path traversal vulnerability exists in the Stapler web framework used by Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/org/kohsuke/stapler/Facet.java, groovy/src/main/java/org/kohsuke/stapler/jelly/groovy/GroovyFacet.java, jelly/src/main/java/org/kohsuke/stapler/jelly/JellyFacet.java, jruby/src/main/java/org/kohsuke/stapler/jelly/jruby/JRubyFacet.java, jsp/src/main/java/org/kohsuke/stapler/jsp/JSPFacet.java that allows attackers to render routable objects using any view in Jenkins, exposing internal information about those objects not intended to be viewed, such as their toString() representation.","exploit_maturity":"No public exploit","published":"2019-01-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2019-2550","description":"Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff Page). The supported version that is affected is 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2549","description":"Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff Page). The supported version that is affected is 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Direct Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Direct Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2546","description":"Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: SQL Extensions). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Manager accessible data. CVSS 3.0 Base Score 8.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2540","description":"Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java Advanced Management Console. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java Advanced Management Console, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java Advanced Management Console accessible data as well as unauthorized read access to a subset of Java Advanced Management Console accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2519","description":"Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition Status). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise SCM eProcurement, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise SCM eProcurement accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise SCM eProcurement accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2512","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7-17.12 and 18.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2499","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2496","description":"Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2492","description":"Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Email Center accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2491","description":"Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Email Center accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2490","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Panel Processor). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2488","description":"Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Session Management). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2487","description":"Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: UI Infrastructure). Supported versions that are affected are 6.3.7, 6.4.1, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Transportation Management accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2485","description":"Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite (subcomponent: Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Field Service. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Mobile Field Service, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Mobile Field Service accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2471","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2452","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. CVSS 3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2442","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2441","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Application Container - JavaEE). The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2439","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2438","description":"Vulnerability in the Oracle Web Cache component of Oracle Fusion Middleware (subcomponent: ESI/Partial Page Caching). The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Cache. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Web Cache, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Web Cache accessible data as well as unauthorized update, insert or delete access to some of Oracle Web Cache accessible data. CVSS 3.0 Base Score 6.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2432","description":"Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Login). Supported versions that are affected are 8.1 and 8.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety. While the vulnerability is in Oracle Argus Safety, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Argus Safety accessible data as well as unauthorized read access to a subset of Oracle Argus Safety accessible data. CVSS 3.0 Base Score 4.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2431","description":"Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Console). Supported versions that are affected are 8.1 and 8.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Argus Safety. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Argus Safety, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Argus Safety accessible data. CVSS 3.0 Base Score 6.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2430","description":"Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Console). Supported versions that are affected are 8.1 and 8.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Argus Safety accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2427","description":"Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: WebCenter Spaces Application). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Portal accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2425","description":"Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2423","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2421","description":"Vulnerability in the PeopleSoft Enterprise HCM eProfile Manager Desktop component of Oracle PeopleSoft Products (subcomponent: Guided Self Service). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM eProfile Manager Desktop. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HCM eProfile Manager Desktop, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM eProfile Manager Desktop accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM eProfile Manager Desktop accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2419","description":"Vulnerability in the PeopleSoft Enterprise CC Common Application Objects component of Oracle PeopleSoft Products (subcomponent: Form and Approval Builder). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise CC Common Application Objects, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise CC Common Application Objects accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise CC Common Application Objects accessible data. Note: This Enterprise Common Component is used by all PeopleSoft Application products. Please refer to the \u003ca target=\"_blank\" href=\"https://support.oracle.com/rs?type=doc\u0026id=2487756.1\"\u003eMOS Note Doc ID 2493366.1 for patch information. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2418","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.0 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2417","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2415","description":"Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: Foundation UI \u0026 Servlets). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion BI+. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hyperion BI+ accessible data as well as unauthorized read access to a subset of Hyperion BI+ accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Hyperion BI+. CVSS 3.0 Base Score 4.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2413","description":"Vulnerability in the Oracle Reports Developer component of Oracle Fusion Middleware (subcomponent: Valid Session). The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Reports Developer accessible data as well as unauthorized read access to a subset of Oracle Reports Developer accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"Working exploit published","published":"2019-01-16","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2019-2410","description":"Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: DGS RES Online, FMS Sender, FMS Receiver, OHC WPF Security). The supported version that is affected is 8.0.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality Cruise Shipboard Property Management System executes to compromise Oracle Hospitality Cruise Shipboard Property Management System. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Shipboard Property Management System accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Shipboard Property Management System accessible data. CVSS 3.0 Base Score 5.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2409","description":"Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: SPMS Suite). The supported version that is affected is 8.0.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Cruise Shipboard Property Management System executes to compromise Oracle Hospitality Cruise Shipboard Property Management System. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Cruise Shipboard Property Management System, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Cruise Shipboard Property Management System as well as unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Shipboard Property Management System accessible data and unauthorized read access to a subset of Oracle Hospitality Cruise Shipboard Property Management System accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2408","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Feeds). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2407","description":"Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle Hospitality Reporting and Analytics executes to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2404","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2403","description":"Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data as well as unauthorized read access to a subset of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2399","description":"Vulnerability in the Oracle Communications Diameter Signaling Router (DSR) component of Oracle Communications Applications (subcomponent: Security). The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Diameter Signaling Router (DSR). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Diameter Signaling Router (DSR) accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Diameter Signaling Router (DSR). CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2398","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Deployment). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2397","description":"Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle Hospitality Reporting and Analytics executes to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 4.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2396","description":"Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2019-2395","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.0 Base Score 5.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3305","description":"Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for Web Apps). Supported versions that are affected are 12.5.0.3, 13.1.0.1, 13.2.0.1 and 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Testing Suite accessible data as well as unauthorized read access to a subset of Oracle Application Testing Suite accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Application Testing Suite. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3304","description":"Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for Web Apps). Supported versions that are affected are 12.5.0.3, 13.1.0.1, 13.2.0.1 and 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Testing Suite accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Application Testing Suite. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3303","description":"Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite (subcomponent: EM Console). Supported versions that are affected are 13.2 and 13.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data as well as unauthorized read access to a subset of Enterprise Manager Base Platform accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3125","description":"Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications (subcomponent: Security (SQL Logger)). The supported version that is affected is 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Merchandising System. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Merchandising System accessible data as well as unauthorized read access to a subset of Oracle Retail Merchandising System accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2019-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-1000426","description":"A cross-site scripting vulnerability exists in Jenkins Git Changelog Plugin 2.6 and earlier in GitChangelogSummaryDecorator/summary.jelly, GitChangelogLeftsideBuildDecorator/badge.jelly, GitLogJiraFilterPostPublisher/config.jelly, GitLogBasicChangelogPostPublisher/config.jelly that allows attackers able to control the Git history parsed by the plugin to have Jenkins render arbitrary HTML on some pages.","exploit_maturity":"No public exploit","published":"2019-01-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000422","description":"An improper authorization vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in CrowdSecurityRealm.java that allows attackers to have Jenkins perform a connection test, connecting to an attacker-specified server with attacker-specified credentials and connection settings.","exploit_maturity":"No public exploit","published":"2019-01-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000421","description":"An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to initiate a test connection to an attacker-specified Mesos server with attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-01-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000420","description":"An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-01-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000419","description":"An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2019-01-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000416","description":"A reflected cross-site scripting vulnerability exists in Jenkins Job Config History Plugin 2.18 and earlier in all Jelly files that shows arbitrary attacker-specified HTML in Jenkins to users with Job/Configure access.","exploit_maturity":"No public exploit","published":"2019-01-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000415","description":"A cross-site scripting vulnerability exists in Jenkins Rebuilder Plugin 1.28 and earlier in RebuildAction/BooleanParameterValue.jelly, RebuildAction/ExtendedChoiceParameterValue.jelly, RebuildAction/FileParameterValue.jelly, RebuildAction/LabelParameterValue.jelly, RebuildAction/ListSubversionTagsParameterValue.jelly, RebuildAction/MavenMetadataParameterValue.jelly, RebuildAction/NodeParameterValue.jelly, RebuildAction/PasswordParameterValue.jelly, RebuildAction/RandomStringParameterValue.jelly, RebuildAction/RunParameterValue.jelly, RebuildAction/StringParameterValue.jelly, RebuildAction/TextParameterValue.jelly, RebuildAction/ValidatingStringParameterValue.jelly that allows users with Job/Configuration permission to insert arbitrary HTML into rebuild forms.","exploit_maturity":"No public exploit","published":"2019-01-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000413","description":"A cross-site scripting vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in configfiles.jelly, providerlist.jelly that allows users with the ability to configure configuration files to insert arbitrary HTML into some pages in Jenkins.","exploit_maturity":"No public exploit","published":"2019-01-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000411","description":"A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.","exploit_maturity":"No public exploit","published":"2019-01-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000409","description":"A session fixation vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java that prevented Jenkins from invalidating the existing session and creating a new one when a user signed up for a new user account.","exploit_maturity":"No public exploit","published":"2019-01-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000408","description":"A denial of service vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java that allows attackers without Overall/Read permission to access a specific URL on instances using the built-in Jenkins user database security realm that results in the creation of an ephemeral user record in memory.","exploit_maturity":"No public exploit","published":"2019-01-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000407","description":"A cross-site scripting vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/Api.java that allows attackers to specify URLs to Jenkins that result in rendering arbitrary attacker-controlled HTML by Jenkins.","exploit_maturity":"No public exploit","published":"2019-01-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000406","description":"A path traversal vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java that allows attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an arbitrary file write on the Jenkins master when scheduling a build.","exploit_maturity":"No public exploit","published":"2019-01-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-11798","description":"The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.","exploit_maturity":"No public exploit","published":"2019-01-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-20663","description":"The Reporting Addon (aka Reports Addon) through 2019-01-02 for CUBA Platform through 6.10.x has Persistent XSS via the \"Reports \u003e Reports\" name field.","exploit_maturity":"No public exploit","published":"2019-01-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-18893","description":"Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.","exploit_maturity":"No public exploit","published":"2019-01-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-20594","description":"An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.","exploit_maturity":"No public exploit","published":"2018-12-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-17197","description":"A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.","exploit_maturity":"No public exploit","published":"2018-12-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-17247","description":"Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning's find_file_structure API. If a policy allowing external network access has been added to Elasticsearch's Java Security Manager then an attacker could send a specially crafted request capable of leaking content of local files on the Elasticsearch node. This could allow a user to access information that they should not have access to.","exploit_maturity":"No public exploit","published":"2018-12-20","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-17244","description":"Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active Directory, LDAP, Native, or File realms. A request may receive headers intended for another request if the same username is being authenticated concurrently; when used with run as, this can result in the request running as the incorrect user. This could allow a user to access information that they should not have access to.","exploit_maturity":"No public exploit","published":"2018-12-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000873","description":"Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the nanoseconds field of a time value. This vulnerability appears to have been fixed in 2.9.8.","exploit_maturity":"No public exploit","published":"2018-12-20","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-17193","description":"The message-page.jsp error page used the value of the HTTP request header X-ProxyContextPath without sanitization, resulting in a reflected XSS attack. Mitigation: The fix to correctly parse and sanitize the request attribute value was applied on the Apache NiFi 1.8.0 release. Users running a prior 1.x release should upgrade to the appropriate release.","exploit_maturity":"No public exploit","published":"2018-12-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-17192","description":"The X-Frame-Options headers were applied inconsistently on some HTTP responses, resulting in duplicate or missing security headers. Some browsers would interpret these results incorrectly, allowing clickjacking attacks. Mitigation: The fix to consistently apply the security headers was applied on the Apache NiFi 1.8.0 release. Users running a prior 1.x release should upgrade to the appropriate release.","exploit_maturity":"No public exploit","published":"2018-12-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-11799","description":"Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users. The malicious user can construct an XML that results workflows running in other user's name.","exploit_maturity":"No public exploit","published":"2018-12-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-19413","description":"A vulnerability in the API of SonarSource SonarQube before 7.4 could allow an authenticated user to discover sensitive information such as valid user-account logins in the web application. The vulnerability occurs because of improperly configured access controls that cause the API to return the externalIdentity field to non-administrator users. The attacker could use this information in subsequent attacks against the system.","exploit_maturity":"No public exploit","published":"2018-12-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1957","description":"IBM WebSphere Application Server 9 could allow sensitive information to be available caused by mishandling of data by the application based on an incorrect return by the httpServletRequest#authenticate() API when an unprotected URI is accessed. IBM X-Force ID: 153629.","exploit_maturity":"No public exploit","published":"2018-12-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-1000864","description":"A denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop.","exploit_maturity":"No public exploit","published":"2018-12-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000862","description":"An information exposure vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in DirectoryBrowserSupport.java that allows attackers with the ability to control build output to browse the file system on agents running builds beyond the duration of the build using the workspace browser.","exploit_maturity":"No public exploit","published":"2018-12-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-19859","description":"OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive.","exploit_maturity":"No public exploit","published":"2018-12-05","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1797","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA) could allow a local attacker to traverse directories on the system. By persuading a victim to extract a specially-crafted ZIP archive containing \"dot dot slash\" sequences (../), an attacker could exploit this vulnerability to write to arbitrary files on the system. Note: This vulnerability is known as \"Zip-Slip\". IBM X-Force ID: 149427.","exploit_maturity":"No public exploit","published":"2018-11-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1643","description":"The Installation Verification Tool of IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 144588","exploit_maturity":"No public exploit","published":"2018-11-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-14658","description":"A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils before the redirect url is verified. This can lead to an Open Redirection attack","exploit_maturity":"No public exploit","published":"2018-11-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-14655","description":"A flaw was found in Keycloak 3.4.3.Final, 4.0.0.Beta2, 4.3.0.Final. When using 'response_mode=form_post' it is possible to inject arbitrary Javascript-Code via the 'state'-parameter in the authentication URL. This allows an XSS-Attack upon succesfully login.","exploit_maturity":"No public exploit","published":"2018-11-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1314","description":"In Apache Hive 2.3.3, 3.1.0 and earlier, Hive \"EXPLAIN\" operation does not check for necessary authorization of involved entities in a query. An unauthorized user can do \"EXPLAIN\" on arbitrary table or view and expose table metadata and statistics.","exploit_maturity":"No public exploit","published":"2018-11-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-17184","description":"A malicious user with enough administration entitlements can inject html-like elements containing JavaScript statements into Connector names, Report names, AnyTypeClass keys and Policy descriptions. When another user with enough administration entitlements edits one of the Entities above via Admin Console, the injected JavaScript code is executed.","exploit_maturity":"No public exploit","published":"2018-11-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-14660","description":"A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY xattr. A remote, authenticated attacker could use this flaw to create multiple locks for single inode by using setxattr repetitively resulting in memory exhaustion of glusterfs server node.","exploit_maturity":"No public exploit","published":"2018-11-01","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-14661","description":"It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.","exploit_maturity":"No public exploit","published":"2018-10-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-14659","description":"The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.","exploit_maturity":"No public exploit","published":"2018-10-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-14654","description":"The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could exploit this via the 'GF_XATTROP_ENTRY_IN_KEY' xattrop to create arbitrary, empty files on the target server.","exploit_maturity":"No public exploit","published":"2018-10-31","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-6343","description":"JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder (usually admins) to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of script code within the context of the affected user.","exploit_maturity":"No public exploit","published":"2018-10-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3301","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3281","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 - 17.12 and 18.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3262","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Stylesheet). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3261","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3257","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3256","description":"Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Email Center accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3255","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3254","description":"Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: WebCenter Spaces Application). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Portal accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3250","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3249","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3248","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3244","description":"Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3241","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 - 17.12 and 18.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3239","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3238","description":"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is 11.1.1.8.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 6.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N).","exploit_maturity":"Working exploit published","published":"2018-10-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2018-3237","description":"Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Support Cart). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Applications Manager accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3236","description":"Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: Reports). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle User Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle User Management accessible data as well as unauthorized access to critical data or complete access to all Oracle User Management accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3215","description":"Vulnerability in the Oracle Endeca Information Discovery Integrator component of Oracle Fusion Middleware (subcomponent: Integrator ETL). Supported versions that are affected are 3.1.0 and 3.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Endeca Information Discovery Integrator. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Endeca Information Discovery Integrator accessible data as well as unauthorized read access to a subset of Oracle Endeca Information Discovery Integrator accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3214","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported versions that are affected are Java SE: 6u201, 7u191 and 8u182; Java SE Embedded: 8u181; JRockit: R28.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-3211","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serviceability). Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Java SE, Java SE Embedded executes to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). This vulnerability can only be exploited when Java Usage Tracker functionality is being used. CVSS 3.0 Base Score 6.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2018-3210","description":"Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GlassFish Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3207","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3206","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3205","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Workflow). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3202","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3198","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3194","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3193","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3181","description":"Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC ENOAD). The supported version that is affected is 8.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Cruise Shipboard Property Management System executes to compromise Oracle Hospitality Cruise Shipboard Property Management System. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Cruise Shipboard Property Management System accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3180","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-3178","description":"Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Common Events. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Hyperion Common Events, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hyperion Common Events accessible data as well as unauthorized read access to a subset of Hyperion Common Events accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3177","description":"Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Common Events. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Hyperion Common Events, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hyperion Common Events accessible data as well as unauthorized read access to a subset of Hyperion Common Events accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3176","description":"Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Common Events. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Hyperion Common Events, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hyperion Common Events accessible data as well as unauthorized read access to a subset of Hyperion Common Events accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3175","description":"Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Common Events. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Hyperion Common Events, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hyperion Common Events accessible data as well as unauthorized read access to a subset of Hyperion Common Events accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3167","description":"Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite (subcomponent: User Monitoring). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Application Management Pack for Oracle E-Business Suite. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Application Management Pack for Oracle E-Business Suite accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"Working exploit published","published":"2018-10-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2018-3166","description":"Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality Cruise Fleet Management accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3164","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Elastic Search). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3163","description":"Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Cruise Fleet Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Cruise Fleet Management. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3159","description":"Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Sender and Receiver). The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Cruise Fleet Management executes to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Cruise Fleet Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Fleet Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3154","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3153","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3148","description":"Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 15.1, 15.2, 16.1, 16.2, 17.1-17.12 and 18.1-18.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Unifier, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Unifier accessible data as well as unauthorized read access to a subset of Primavera Unifier accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3141","description":"Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase Administration Services. While the vulnerability is in Hyperion Essbase Administration Services, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hyperion Essbase Administration Services accessible data. CVSS 3.0 Base Score 5.8 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3140","description":"Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase Administration Services. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Hyperion Essbase Administration Services, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hyperion Essbase Administration Services accessible data as well as unauthorized read access to a subset of Hyperion Essbase Administration Services accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3135","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3134","description":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: User Group Management). The supported version that is affected is 6.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Product Lifecycle Management for Process executes to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile Product Lifecycle Management for Process accessible data as well as unauthorized read access to a subset of Oracle Agile Product Lifecycle Management for Process accessible data. CVSS 3.0 Base Score 5.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3132","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Rich Text Editor). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3131","description":"Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle Hospitality Gift and Loyalty executes to compromise Oracle Hospitality Gift and Loyalty. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Gift and Loyalty accessible data as well as unauthorized update, insert, or delete access to some of Oracle Hospitality Gift and Loyalty accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3130","description":"Vulnerability in the PeopleSoft Enterprise Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Application Portal). The supported version that is affected is 9.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise Interaction Hub. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise Interaction Hub accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3129","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3127","description":"Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). Supported versions that are affected are 7.3.5 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Demantra Demand Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Demantra Demand Management accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3126","description":"Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Xenvironment). Supported versions that are affected are 15.0.2, 16.0.4 and 17.0.2. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Retail Xstore Point of Service. Successful attacks of this vulnerability can result in takeover of Oracle Retail Xstore Point of Service. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3122","description":"Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Integrations). Supported versions that are affected are 6.0, 6.0.1 and 5.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Open Commerce Platform. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Retail Open Commerce Platform accessible data as well as unauthorized access to critical data or complete access to all Oracle Retail Open Commerce Platform accessible data. CVSS 3.0 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3059","description":"Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions that are affected are 18.7, 18.8 and 18.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel UI Framework accessible data as well as unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2971","description":"Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: REST Services). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Applications Framework accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2902","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Console). Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2887","description":"Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). Supported versions that are affected are 13.0.0 and 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Retail-J. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MICROS Retail-J accessible data as well as unauthorized read access to a subset of MICROS Retail-J accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-1838","description":"IBM WebSphere Application Server 8.5 and 9.0 in IBM Cloud could allow a remote attacker to obtain sensitive information caused by improper handling of passwords. IBM X-Force ID: 150811.","exploit_maturity":"No public exploit","published":"2018-10-12","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-1770","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 148686.","exploit_maturity":"No public exploit","published":"2018-10-12","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-8006","description":"An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache ActiveMQ versions 5.0.0 to 5.15.5. The root cause of this issue is improper data filtering of the QueueFilter parameter.","exploit_maturity":"Working exploit published","published":"2018-10-10","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2018-12541","description":"In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit (8192 bytes) above which the WebSocket gets an HTTP response with the 413 status code and the connection gets closed.","exploit_maturity":"No public exploit","published":"2018-10-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-11797","description":"In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.","exploit_maturity":"No public exploit","published":"2018-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-6695","description":"SSH host keys generation vulnerability in the server in McAfee Threat Intelligence Exchange Server (TIE Server) 1.3.0, 2.0.x, 2.1.x, 2.2.0 allows man-in-the-middle attackers to spoof servers via acquiring keys from another environment.","exploit_maturity":"No public exploit","published":"2018-10-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-16277","description":"The Image Import function in XWiki through 10.7 has XSS.","exploit_maturity":"No public exploit","published":"2018-09-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-8023","description":"Apache Mesos can be configured to require authentication to call the Executor HTTP API using JSON Web Token (JWT). In Apache Mesos versions pre-1.4.2, 1.5.0, 1.5.1, 1.6.0 the comparison of the generated HMAC value against the provided signature in the JWT implementation used is vulnerable to a timing attack because instead of a constant-time string comparison routine a standard `==` operator has been used. A malicious actor can therefore abuse the timing difference of when the JWT validation function returns to reveal the correct HMAC value.","exploit_maturity":"No public exploit","published":"2018-09-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-8017","description":"In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser.","exploit_maturity":"No public exploit","published":"2018-09-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-3824","description":"X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive information from or perform destructive actions on behalf of that other ML user.","exploit_maturity":"No public exploit","published":"2018-09-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-11762","description":"In Apache Tika 0.9 to 1.18, in a rare edge case where a user does not specify an extract directory on the commandline (--extract-dir=) and the input file has an embedded file with an absolute path, such as \"C:/evil.bat\", tika-app would overwrite that file.","exploit_maturity":"No public exploit","published":"2018-09-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-16959","description":"An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The portal component is delivered with an insecure default User Profile community configuration that allows anonymous users to retrieve the account names of all portal users via /portal/server.pt/user/user/ requests. When WCI is synchronised with Active Directory (AD), this vulnerability can expose the account names of all AD users. NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle WebCenter Interaction Portal is out of support.","exploit_maturity":"No public exploit","published":"2018-09-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-16958","description":"An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The ASP.NET_SessionID primary session cookie, when Internet Information Services (IIS) with ASP.NET is used, is not protected with the HttpOnly attribute. The attribute cannot be enabled by customers. Consequently, this cookie is exposed to session hijacking attacks should an adversary be able to execute JavaScript in the origin of the portal installation. NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle WebCenter Interaction Portal is out of support.","exploit_maturity":"No public exploit","published":"2018-09-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-16956","description":"The AjaxControl component of Oracle WebCenter Interaction Portal 10.3.3 does not validate the names of pages when processing page rename requests. Pages can be renamed to include characters unsupported for URIs by the web server hosting the WCI Portal software (such as IIS). Renaming pages to include unsupported characters, such as 0x7f, prevents these pages from being accessed over the web server, causing a Denial of Service (DoS) to the page. NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle WebCenter Interaction Portal is out of support.","exploit_maturity":"No public exploit","published":"2018-09-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-16955","description":"The login function of Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site scripting (XSS). The content of the in_hi_redirect parameter, when prefixed with the https:// scheme, is unsafely reflected in a HTML META tag in the HTTP response. NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle WebCenter Interaction Portal is out of support.","exploit_maturity":"No public exploit","published":"2018-09-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-16954","description":"An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The login function of the portal is vulnerable to insecure redirection (also called an open redirect). The in_hi_redirect parameter is not validated by the application after a successful login. NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle WebCenter Interaction Portal is out of support.","exploit_maturity":"No public exploit","published":"2018-09-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-16953","description":"The AjaxView::DisplayResponse() function of the portalpages.dll assembly in Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site scripting (XSS). User input from the name parameter is unsafely reflected in the server response. NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle WebCenter Interaction Portal is out of support.","exploit_maturity":"No public exploit","published":"2018-09-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-14642","description":"An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests.","exploit_maturity":"No public exploit","published":"2018-09-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-8041","description":"Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal.","exploit_maturity":"No public exploit","published":"2018-09-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1719","description":"IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security under certain conditions. This could result in a downgrade of TLS protocol. A remote attacker could exploit this vulnerability to perform man-in-the-middle attacks. IBM X-Force ID: 147292.","exploit_maturity":"No public exploit","published":"2018-09-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-11087","description":"Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit.","exploit_maturity":"No public exploit","published":"2018-09-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1114","description":"It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.","exploit_maturity":"No public exploit","published":"2018-09-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-7061","description":"An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.","exploit_maturity":"No public exploit","published":"2018-09-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-7041","description":"Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected host.","exploit_maturity":"No public exploit","published":"2018-09-10","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1000665","description":"Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js in the DOH that can result in Victim attacked through their browser - deliver malware, steal HTTP cookies, bypass CORS trust. This attack appear to be exploitable via Victims are typically lured to a web site under the attacker's control; the XSS vulnerability on the target domain is silently exploited without the victim's knowledge. This vulnerability appears to have been fixed in 1.14.","exploit_maturity":"No public exploit","published":"2018-09-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-14627","description":"The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections: \u003ctransport-config confidentiality=\"required\" trust-in-target=\"supported\"/\u003e","exploit_maturity":"No public exploit","published":"2018-09-04","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-11057","description":"RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher attack on RSA decryption. A remote attacker may be able to recover a RSA key.","exploit_maturity":"No public exploit","published":"2018-08-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-11056","description":"RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption ('Resource Exhaustion') vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would exhaust the stack, potentially causing a Denial Of Service.","exploit_maturity":"No public exploit","published":"2018-08-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-11055","description":"RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before Release ('Heap Inspection') vulnerability. Decoded PKCS #12 data in heap memory is not zeroized by MES before releasing the memory internally and a malicious local user could gain access to the unauthorized data by doing heap inspection.","exploit_maturity":"No public exploit","published":"2018-08-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-1755","description":"IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by incorrect transport being used when Liberty is configured to use Java Authentication SPI for Containers (JASPIC). This can happen when the Application Server is configured to permit access on non-secure (http) port and using JASPIC or JSR375 authentication.","exploit_maturity":"No public exploit","published":"2018-08-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-1999047","description":"A improper authorization vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in UpdateCenter.java that allows attackers to cancel a Jenkins restart scheduled through the update center.","exploit_maturity":"No public exploit","published":"2018-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999046","description":"A exposure of sensitive information vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in Computer.java that allows attackers With Overall/Read permission to access the connection log for any agent.","exploit_maturity":"No public exploit","published":"2018-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999045","description":"A improper authentication vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in SecurityRealm.java, TokenBasedRememberMeServices2.java that allows attackers with a valid cookie to remain logged in even if that feature is disabled.","exploit_maturity":"No public exploit","published":"2018-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999044","description":"A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop.","exploit_maturity":"No public exploit","published":"2018-08-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999042","description":"A vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in XStream2.java that allows attackers to have Jenkins resolve a domain name when deserializing an instance of java.net.URL.","exploit_maturity":"No public exploit","published":"2018-08-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-11771","description":"When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamReader this can lead to an infinite stream, which can be used to mount a denial of service attack against services that use Compress' zip package.","exploit_maturity":"No public exploit","published":"2018-08-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-12537","description":"In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or server response.","exploit_maturity":"No public exploit","published":"2018-08-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-11770","description":"From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the submission mechanism used by spark-submit. In standalone, the config property 'spark.authenticate.secret' establishes a shared secret for authenticating requests to submit jobs via spark-submit. However, the REST API does not use this or any other authentication mechanism, and this is not adequately documented. In this case, a user would be able to run a driver program without authenticating, but not launch executors, using the REST API. This REST API is also used by Mesos, when set up to run in cluster mode (i.e., when also running MesosClusterDispatcher), for job submission. Future versions of Spark will improve documentation on these points, and prohibit setting 'spark.authenticate.secret' when running the REST APIs, to make this clear. Future versions will also disable the REST API by default in the standalone master by changing the default value of 'spark.master.rest.enabled' to 'false'.","exploit_maturity":"Forecast only","published":"2018-08-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-10908","description":"It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources. By uploading a specially crafted image, an attacker could cause the qemu-img process to consume unbounded amounts of memory of CPU time, causing a denial of service condition that could potentially impact other users of the host.","exploit_maturity":"No public exploit","published":"2018-08-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-2654","description":"jenkins-email-ext before version 2.57.1 is vulnerable to an Information Exposure. The Email Extension Plugins is able to send emails to a dynamically created list of users based on the changelogs, like authors of SCM changes since the last successful build. This could in some cases result in emails being sent to people who have no user account in Jenkins, and in rare cases even people who were not involved in whatever project was being built, due to some mapping based on the local-part of email addresses.","exploit_maturity":"No public exploit","published":"2018-08-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-8037","description":"If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not correctly track the closure of the connection when an async request was completed by the application and timed out by the container at the same time. This could also result in a user seeing a response intended for another user. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.9 and 8.5.5 to 8.5.31.","exploit_maturity":"No public exploit","published":"2018-08-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-8032","description":"Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.","exploit_maturity":"No public exploit","published":"2018-08-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-3109","description":"Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder). Supported versions that are affected are 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Fusion Middleware MapViewer. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Fusion Middleware MapViewer accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-08-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3108","description":"Vulnerability in the Oracle Fusion Middleware component of Oracle Fusion Middleware (subcomponent: Oracle Notification Service). Supported versions that are affected are 12.2.1.2 and 12.2.1.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Fusion Middleware. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Fusion Middleware accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-08-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2933","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. Note: Please refer to MOS document","exploit_maturity":"No public exploit","published":"2018-08-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-1999041","description":"An exposure of sensitive information vulnerability exists in Jenkins Tinfoil Security Plugin 1.6.1 and earlier in TinfoilScanRecorder.java that allows attackers with file system access to the Jenkins master to obtain the API secret key stored in this plugin's configuration.","exploit_maturity":"No public exploit","published":"2018-08-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999039","description":"A server-side request forgery vulnerability exists in Jenkins Confluence Publisher Plugin 2.0.1 and earlier in ConfluenceSite.java that allows attackers to have Jenkins submit login requests to an attacker-specified Confluence server URL with attacker specified credentials.","exploit_maturity":"No public exploit","published":"2018-08-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999038","description":"A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specified CIFS server with attacker specified credentials.","exploit_maturity":"No public exploit","published":"2018-08-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999037","description":"A data modification vulnerability exists in Jenkins Resource Disposer Plugin 0.11 and earlier in AsyncResourceDisposer.java that allows attackers to stop tracking a resource.","exploit_maturity":"No public exploit","published":"2018-08-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999036","description":"An exposure of sensitive information vulnerability exists in Jenkins SSH Agent Plugin 1.15 and earlier in SSHAgentStepExecution.java that exposes the SSH private key password to users with permission to read the build log.","exploit_maturity":"No public exploit","published":"2018-08-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999033","description":"An exposure of sensitive information vulnerability exists in Jenkins Anchore Container Image Scanner Plugin 10.16 and earlier in AnchoreBuilder.java that allows attackers with Item/ExtendedRead permission or file system access to the Jenkins master to obtain the password stored in this plugin's configuration.","exploit_maturity":"No public exploit","published":"2018-08-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999032","description":"A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.java that allows attackers with Overall/Read permission to override this plugin's configuration by sending crafted HTTP requests to an unprotected endpoint.","exploit_maturity":"No public exploit","published":"2018-08-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999031","description":"An exposure of sensitive information vulnerability exists in Jenkins meliora-testlab Plugin 1.14 and earlier in TestlabNotifier.java that allows attackers with file system access to the Jenkins master to obtain the API key stored in this plugin's configuration.","exploit_maturity":"No public exploit","published":"2018-08-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999030","description":"An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceListProvider.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.","exploit_maturity":"No public exploit","published":"2018-08-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999029","description":"A cross-site scripting vulnerability exists in Jenkins Shelve Project Plugin 1.5 and earlier in ShelveProjectAction/index.jelly, ShelvedProjectsAction/index.jelly that allows attackers with Job/Configure permission to define JavaScript that would be executed in another user's browser when that other user performs some UI actions.","exploit_maturity":"No public exploit","published":"2018-08-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999026","description":"A server-side request forgery vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java that allows attackers to have Jenkins send HTTP requests to an attacker-specified host.","exploit_maturity":"No public exploit","published":"2018-08-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-10894","description":"It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks.","exploit_maturity":"No public exploit","published":"2018-08-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-8653","description":"It was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the credentials passed to it. An attacker could use this flaw to launch a denial of service attack.","exploit_maturity":"No public exploit","published":"2018-08-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-8608","description":"JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplete fix for CVE-2016-5398. Remote, authenticated attackers that have privileges to create business processes can store scripts in them, which are not properly sanitized before showing to other users, including admins.","exploit_maturity":"No public exploit","published":"2018-08-01","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-10862","description":"WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.","exploit_maturity":"No public exploit","published":"2018-07-27","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-7463","description":"JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a reflected XSS via artifact upload. A malformed XML file, if uploaded, causes an error message to appear that includes part of the bad XML code verbatim without filtering out scripts. Successful exploitation would allow execution of script code within the context of the affected user.","exploit_maturity":"No public exploit","published":"2018-07-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-2674","description":"JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central. The flaw is due to lack of sanitation of user input when creating new lists. Remote, authenticated attackers that have privileges to create lists can store scripts in them, which are not properly sanitized before showing to other users, including admins.","exploit_maturity":"No public exploit","published":"2018-07-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-2666","description":"It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.","exploit_maturity":"No public exploit","published":"2018-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-2658","description":"It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization \u0026 Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a user into performing arbitrary actions in the Console (clickjacking).","exploit_maturity":"No public exploit","published":"2018-07-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-2648","description":"It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle attacks.","exploit_maturity":"No public exploit","published":"2018-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1288","description":"In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss.","exploit_maturity":"No public exploit","published":"2018-07-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-7545","description":"It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, potentially, perform other more advanced XML eXternal Entity (XXE) attacks.","exploit_maturity":"No public exploit","published":"2018-07-26","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-2582","description":"It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request ID field to be the chosen system property which could be obtained in the \"InResponseTo\" field in the response.","exploit_maturity":"No public exploit","published":"2018-07-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-12610","description":"In Apache Kafka 0.10.0.0 to 0.10.2.1 and 0.11.0.0 to 0.11.0.1, authenticated Kafka clients may use impersonation via a manually crafted protocol message with SASL/PLAIN or SASL/SCRAM authentication when using the built-in PLAIN or SCRAM server implementations in Apache Kafka.","exploit_maturity":"No public exploit","published":"2018-07-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-12167","description":"It was found in EAP 7 before 7.0.9 that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system.","exploit_maturity":"No public exploit","published":"2018-07-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1002202","description":"zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.","exploit_maturity":"No public exploit","published":"2018-07-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1002201","description":"zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.","exploit_maturity":"No public exploit","published":"2018-07-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1002200","description":"plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.","exploit_maturity":"No public exploit","published":"2018-07-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-14335","description":"An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.","exploit_maturity":"Working exploit published","published":"2018-07-24","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2018-8031","description":"The Apache TomEE console (tomee-webapp) has a XSS vulnerability which could allow javascript to be executed if the user is given a malicious URL. This web application is typically used to add TomEE features to a Tomcat installation. The TomEE bundles do not ship with this application included. This issue can be mitigated by removing the application after TomEE is setup (if using the application to install TomEE), using one of the provided pre-configured bundles, or by upgrading to TomEE 7.0.5. This issue is resolve in this commit: b8bbf50c23ce97dd64f3a5d77f78f84e47579863.","exploit_maturity":"No public exploit","published":"2018-07-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999006","description":"A exposure of sensitive information vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Plugin.java that allows attackers to determine the date and time when a plugin HPI/JPI file was last extracted, which typically is the date of the most recent installation/upgrade.","exploit_maturity":"No public exploit","published":"2018-07-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999004","description":"A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in SlaveComputer.java that allows attackers with Overall/Read permission to initiate agent launches, and abort in-progress agent launches.","exploit_maturity":"No public exploit","published":"2018-07-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1999003","description":"A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Queue.java that allows attackers with Overall/Read permission to cancel queued builds.","exploit_maturity":"No public exploit","published":"2018-07-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-10912","description":"keycloak before version 4.0.0.final is vulnerable to a infinite loop in session replacement. A Keycloak cluster with multiple nodes could mishandle an expired session replacement and lead to an infinite loop. A malicious authenticated user could use this flaw to achieve Denial of Service on the server.","exploit_maturity":"No public exploit","published":"2018-07-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-3105","description":"Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware (subcomponent: Health Care FastPath). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle SOA Suite accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3101","description":"Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: Portlet Services). Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Portal accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3072","description":"Vulnerability in the PeopleSoft HRMS component of Oracle PeopleSoft Products (subcomponent: Candidate Gateway). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft HRMS. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft HRMS accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3068","description":"Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products (subcomponent: Compensation). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HCM Human Resources, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Human Resources accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3053","description":"Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 16.x and 17.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Customer Management and Segmentation Foundation. While the vulnerability is in Oracle Retail Customer Management and Segmentation Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Customer Management and Segmentation Foundation accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Customer Management and Segmentation Foundation. CVSS 3.0 Base Score 6.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3052","description":"Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 10.8.x and 11.4.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS Relate CRM Software. While the vulnerability is in MICROS Relate CRM Software, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MICROS Relate CRM Software accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MICROS Relate CRM Software. CVSS 3.0 Base Score 6.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3049","description":"Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Enterprise Limits and Collateral Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3048","description":"Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Banking Corporate Lending, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Corporate Lending accessible data as well as unauthorized read access to a subset of Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3047","description":"Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3046","description":"Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3045","description":"Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3044","description":"Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Corporate Lending accessible data as well as unauthorized read access to a subset of Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3043","description":"Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Enterprise Limits and Collateral Management. CVSS 3.0 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3042","description":"Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Corporate Lending accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Corporate Lending. CVSS 3.0 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3041","description":"Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle FLEXCUBE Enterprise Limits and Collateral Management. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3040","description":"Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Banking Corporate Lending. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3039","description":"Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3038","description":"Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3037","description":"Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Enterprise Limits and Collateral Management. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3036","description":"Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Corporate Lending accessible data as well as unauthorized read access to a subset of Oracle Banking Corporate Lending accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Corporate Lending. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3034","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Investor Servicing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3033","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3032","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3031","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Investor Servicing. CVSS 3.0 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3030","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle FLEXCUBE Investor Servicing. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3029","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3028","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Investor Servicing. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3026","description":"Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Banking Payments, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Payments accessible data as well as unauthorized read access to a subset of Oracle Banking Payments accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3025","description":"Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Payments accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3024","description":"Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Payments accessible data as well as unauthorized read access to a subset of Oracle Banking Payments accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3023","description":"Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Payments accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Payments. CVSS 3.0 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3022","description":"Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Banking Payments. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3021","description":"Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Banking Payments accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3020","description":"Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Payments accessible data as well as unauthorized read access to a subset of Oracle Banking Payments accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Payments. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3019","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3016","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3014","description":"Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Reports). The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3013","description":"Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Report Server Config). The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3006","description":"Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3003","description":"Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (subcomponent: Fleet Management System Suite). The supported version that is affected is 9.x. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality Cruise Fleet Management System executes to compromise Oracle Hospitality Cruise Fleet Management System. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Cruise Fleet Management System accessible data. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-3001","description":"Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: SPMS Suite). The supported version that is affected is 8.x. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality Cruise Shipboard Property Management System executes to compromise Oracle Hospitality Cruise Shipboard Property Management System. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Cruise Shipboard Property Management System accessible data. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2999","description":"Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2998","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: SAML). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2994","description":"Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Shopping Cart). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iStore accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2988","description":"Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Products). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS 3.0 Base Score 6.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2987","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Console). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2986","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Workflow). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2985","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Workflow). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2982","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2981","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2980","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2979","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2977","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2975","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2974","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2973","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2018-2972","description":"Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). The supported version that is affected is Java SE: 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2970","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2969","description":"Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). The supported version that is affected is 16.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Primavera Unifier accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2968","description":"Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Primavera Unifier accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2967","description":"Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows physical access to compromise Primavera Unifier. While the vulnerability is in Primavera Unifier, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera Unifier accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2965","description":"Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). The supported version that is affected is 16.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Unifier, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Unifier accessible data as well as unauthorized read access to a subset of Primavera Unifier accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2963","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.x and 16.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2962","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 4.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2961","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2960","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2959","description":"Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). The supported version that is affected is 18.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel UI Framework accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2955","description":"Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Integration). The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2951","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Configuration Manager). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2950","description":"Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2949","description":"Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2948","description":"Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2947","description":"Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Tools accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2946","description":"Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2945","description":"Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2940","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2018-2936","description":"Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications (subcomponent: Web Client). The supported version that is affected is 3.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Messaging Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Messaging Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Messaging Server accessible data as well as unauthorized read access to a subset of Oracle Communications Messaging Server accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2934","description":"Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2929","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2925","description":"Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2919","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Unified Navigation). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2915","description":"Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion (subcomponent: Access and security). The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Hyperion Data Relationship Management. While the vulnerability is in Hyperion Data Relationship Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Hyperion Data Relationship Management accessible data. CVSS 3.0 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2904","description":"Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications (subcomponent: GUI). The supported version that is affected is 10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications EAGLE LNP Application Processor. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications EAGLE LNP Application Processor accessible data as well as unauthorized read access to a subset of Oracle Communications EAGLE LNP Application Processor accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2899","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2898","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Investor Servicing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2897","description":"Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Enterprise Limits and Collateral Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2896","description":"Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Banking Payments, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Payments accessible data as well as unauthorized read access to a subset of Oracle Banking Payments accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2895","description":"Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Banking Corporate Lending, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Corporate Lending accessible data as well as unauthorized read access to a subset of Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2891","description":"Vulnerability in the Oracle Retail Bulk Data Integration component of Oracle Retail Applications (subcomponent: BDI Job Scheduler). The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Bulk Data Integration. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Retail Bulk Data Integration, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Bulk Data Integration accessible data as well as unauthorized read access to a subset of Oracle Retail Bulk Data Integration accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2888","description":"Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x, 12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Difficult to exploit vulnerability allows physical access to compromise MICROS Retail-J. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MICROS Retail-J, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MICROS Retail-J accessible data as well as unauthorized access to critical data or complete access to all MICROS Retail-J accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MICROS Retail-J. CVSS 3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2881","description":"Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Database). Supported versions that are affected are 11.0.x, 12.0.x, 12.1.x, 12.1.1.x, 12.1.2.x and 13.1.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS Retail-J. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MICROS Retail-J accessible data as well as unauthorized read access to a subset of MICROS Retail-J accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MICROS Retail-J. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-14380","description":"In Graylog before 2.4.6, XSS was possible in typeahead components, related to components/common/TypeAheadInput.jsx and components/search/QueryInput.ts.","exploit_maturity":"No public exploit","published":"2018-07-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-2638","description":"It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints. An attacker could use this vulnerability to read or modify data in the default cache or a known cache name.","exploit_maturity":"No public exploit","published":"2018-07-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-14048","description":"An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.","exploit_maturity":"No public exploit","published":"2018-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-1334","description":"In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application.","exploit_maturity":"No public exploit","published":"2018-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-3693","description":"Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.","exploit_maturity":"No public exploit","published":"2018-07-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-13785","description":"In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.","exploit_maturity":"No public exploit","published":"2018-07-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1000402","description":"Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a File and Directory Information Exposure vulnerability in AWSCodeDeployPublisher.java that can result in Disclosure of environment variables. This vulnerability appears to have been fixed in 1.20 and later.","exploit_maturity":"No public exploit","published":"2018-07-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1621","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling of some datasource custom properties. IBM X-Force ID: 144346.","exploit_maturity":"No public exploit","published":"2018-07-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-8026","description":"This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml, enumsConfig.xml referred from schema.xml, TIKA parsecontext config file). In addition, Xinclude functionality provided in these config files is also affected in a similar way. The vulnerability can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the internal network. The manipulated files can be uploaded as configsets using Solr's API, allowing to exploit that vulnerability.","exploit_maturity":"No public exploit","published":"2018-07-05","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-8036","description":"In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser.","exploit_maturity":"No public exploit","published":"2018-07-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-13003","description":"An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'type' to the /suggest URI.","exploit_maturity":"No public exploit","published":"2018-06-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-12973","description":"An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'json' to the /q URI.","exploit_maturity":"No public exploit","published":"2018-06-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-12536","description":"In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a java.nio.file.InvalidPathException which includes the full path to the base resource directory that the DefaultServlet and/or webapp is using. If this InvalidPathException is then handled by the default Error Handler, the InvalidPathException message is included in the error response, revealing the full server path to the requesting system.","exploit_maturity":"No public exploit","published":"2018-06-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000609","description":"A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in ConfigurationAsCode.java that allows attackers with Overall/Read access to obtain the YAML export of the Jenkins configuration.","exploit_maturity":"No public exploit","published":"2018-06-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000607","description":"A arbitrary file write vulnerability exists in Jenkins Fortify CloudScan Plugin 1.5.1 and earlier in ArchiveUtil.java that allows attackers able to control rulepack zip file contents to overwrite any file on the Jenkins master file system, only limited by the permissions of the user the Jenkins master process is running as.","exploit_maturity":"No public exploit","published":"2018-06-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000606","description":"A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.","exploit_maturity":"No public exploit","published":"2018-06-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000604","description":"A persisted cross-site scripting vulnerability exists in Jenkins Badge Plugin 1.4 and earlier in BadgeSummaryAction.java, HtmlBadgeAction.java that allows attackers able to control build badge content to define JavaScript that would be executed in another user's browser when that other user performs some UI actions.","exploit_maturity":"No public exploit","published":"2018-06-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000602","description":"A session fixation vulnerability exists in Jenkins SAML Plugin 1.0.6 and earlier in SamlSecurityRealm.java that allows unauthorized attackers to impersonate another users if they can control the pre-authentication session.","exploit_maturity":"No public exploit","published":"2018-06-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000601","description":"A arbitrary file read vulnerability exists in Jenkins SSH Credentials Plugin 1.13 and earlier in BasicSSHUserPrivateKey.java that allows attackers with a Jenkins account and the permission to configure credential bindings to read arbitrary files from the Jenkins master file system.","exploit_maturity":"No public exploit","published":"2018-06-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000529","description":"Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8.","exploit_maturity":"No public exploit","published":"2018-06-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-11041","description":"Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later than v48 and prior to v60 except v55.1 and v52.9, does not validate redirect URL values on a form parameter used for internal UAA redirects on the login page, allowing open redirects. A remote attacker can craft a malicious link that, when clicked, will redirect users to arbitrary websites after a successful login attempt.","exploit_maturity":"No public exploit","published":"2018-06-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-11039","description":"Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including TRACE) using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS vulnerability, a malicious user (or attacker) can use this filter to escalate to an XST (Cross Site Tracing) attack.","exploit_maturity":"No public exploit","published":"2018-06-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-1073","description":"The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and invalid passwords, allowing an attacker to discover the names of valid user accounts.","exploit_maturity":"No public exploit","published":"2018-06-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-6672","description":"Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to view sensitive information in plain text format via unspecified vectors.","exploit_maturity":"No public exploit","published":"2018-06-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-6671","description":"Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users to bypass localhost only access security protection for some ePO features via a specially crafted HTTP request.","exploit_maturity":"Working exploit published","published":"2018-06-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2018-12432","description":"JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI.","exploit_maturity":"No public exploit","published":"2018-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-12418","description":"Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.","exploit_maturity":"No public exploit","published":"2018-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-11688","description":"Ignite Realtime Openfire before 3.9.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.","exploit_maturity":"No public exploit","published":"2018-06-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1332","description":"Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that could allow a user to impersonate another user when communicating with some Storm Daemons.","exploit_maturity":"No public exploit","published":"2018-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000198","description":"A XML external entity processing vulnerability exists in Jenkins Black Duck Hub Plugin 3.1.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read permission to make Jenkins process XML eternal entities in an XML document.","exploit_maturity":"No public exploit","published":"2018-06-05","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1000196","description":"A exposure of sensitive information vulnerability exists in Jenkins Gitlab Hook Plugin 1.4.2 and older in gitlab_notifier.rb, views/gitlab_notifier/global.erb that allows attackers with local Jenkins master file system access or control of a Jenkins administrator's web browser (e.g. malicious extension) to retrieve the configured Gitlab token.","exploit_maturity":"No public exploit","published":"2018-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000195","description":"A server-side request forgery vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in ZipExtractionInstaller.java that allows users with Overall/Read permission to have Jenkins submit a HTTP GET request to an arbitrary URL and learn whether the response is successful (200) or not.","exploit_maturity":"No public exploit","published":"2018-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000193","description":"A improper neutralization of control sequences vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in HudsonPrivateSecurityRealm.java that allows users to sign up using user names containing control characters that can then appear to have the same name as other users, and cannot be deleted via the UI.","exploit_maturity":"No public exploit","published":"2018-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000192","description":"A information exposure vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in AboutJenkins.java, ListPluginsCommand.java that allows users with Overall/Read access to enumerate all installed plugins.","exploit_maturity":"No public exploit","published":"2018-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000191","description":"A exposure of sensitive information vulnerability exists in Jenkins Black Duck Detect Plugin 1.4.0 and older in DetectPostBuildStepDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2018-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000190","description":"A exposure of sensitive information vulnerability exists in Jenkins Black Duck Hub Plugin 4.0.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2018-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000188","description":"A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.","exploit_maturity":"No public exploit","published":"2018-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000187","description":"A exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.7.0 and older in ContainerExecDecorator.java that results in sensitive variables such as passwords being written to logs.","exploit_maturity":"No public exploit","published":"2018-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000186","description":"A exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin 1.41.0 and older in GhprbGitHubAuth.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2018-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000185","description":"A server-side request forgery vulnerability exists in Jenkins GitHub Branch Source Plugin 2.3.4 and older in Endpoint.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.","exploit_maturity":"No public exploit","published":"2018-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000184","description":"A server-side request forgery vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubPluginConfig.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.","exploit_maturity":"No public exploit","published":"2018-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000183","description":"A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubServerConfig.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","exploit_maturity":"No public exploit","published":"2018-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000182","description":"A server-side request forgery vulnerability exists in Jenkins Git Plugin 3.9.0 and older in AssemblaWeb.java, GitBlitRepositoryBrowser.java, Gitiles.java, TFS2013GitRepositoryBrowser.java, ViewGitWeb.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.","exploit_maturity":"No public exploit","published":"2018-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-1000345","description":"In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For BC 1.55 and older, in an environment where timings can be easily observed, it is possible with enough observations to identify when the decryption is failing due to padding.","exploit_maturity":"No public exploit","published":"2018-06-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-1000341","description":"In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings can be closely observed for the generation of signatures, the lack of blinding in 1.55, or earlier, may allow an attacker to gain information about the signature's k value and ultimately the private value as well.","exploit_maturity":"No public exploit","published":"2018-06-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-11651","description":"Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx.","exploit_maturity":"No public exploit","published":"2018-06-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-11650","description":"Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js.","exploit_maturity":"No public exploit","published":"2018-06-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-2598","description":"Jenkins before versions 2.44, 2.32.2 uses AES ECB block cipher mode without IV for encrypting secrets which makes Jenkins and the stored secrets vulnerable to unnecessary risks (SECURITY-304).","exploit_maturity":"No public exploit","published":"2018-05-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-2609","description":"jenkins before versions 2.44, 2.32.2 is vulnerable to an information disclosure vulnerability in search suggestions (SECURITY-385). The autocomplete feature on the search box discloses the names of the views in its suggestions, including the ones for which the current user does not have access to.","exploit_maturity":"No public exploit","published":"2018-05-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-8010","description":"This vulnerability in Apache Solr 6.0.0 to 6.6.3, 7.0.0 to 7.3.0 relates to an XML external entity expansion (XXE) in Solr config files (solrconfig.xml, schema.xml, managed-schema). In addition, Xinclude functionality provided in these config files is also affected in a similar way. The vulnerability can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the internal network. Users are advised to upgrade to either Solr 6.6.4 or Solr 7.3.1 releases both of which address the vulnerability. Once upgrade is complete, no other steps are required. Those releases only allow external entities and Xincludes that refer to local files / zookeeper resources below the Solr instance directory (using Solr's ResourceLoader); usage of absolute URLs is denied. Keep in mind, that external entities and XInclude are explicitly supported to better structure config files in large installations. Before Solr 6 this was no problem, as config files were not accessible through the APIs.","exploit_maturity":"No public exploit","published":"2018-05-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1067","description":"In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.","exploit_maturity":"No public exploit","published":"2018-05-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-2607","description":"jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting vulnerability in console notes (SECURITY-382). Jenkins allows plugins to annotate build logs, adding new content or changing the presentation of existing content while the build is running. Malicious Jenkins users, or users with SCM access, could configure jobs or modify build scripts such that they print serialized console notes that perform cross-site scripting attacks on Jenkins users viewing the build logs.","exploit_maturity":"No public exploit","published":"2018-05-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-11212","description":"An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.","exploit_maturity":"No public exploit","published":"2018-05-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1263","description":"Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.","exploit_maturity":"No public exploit","published":"2018-05-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-2613","description":"jenkins before versions 2.44, 2.32.2 is vulnerable to a user creation CSRF using GET by admins. While this user record was only retained until restart in most cases, administrators' web browsers could be manipulated to create a large number of user records (SECURITY-406).","exploit_maturity":"No public exploit","published":"2018-05-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-2612","description":"In Jenkins before versions 2.44, 2.32.2 low privilege users were able to override JDK download credentials (SECURITY-392), resulting in future builds possibly failing to download a JDK.","exploit_maturity":"No public exploit","published":"2018-05-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-2610","description":"jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in search suggestions due to improperly escaping users with less-than and greater-than characters in their names (SECURITY-388).","exploit_maturity":"No public exploit","published":"2018-05-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-2604","description":"In Jenkins before versions 2.44, 2.32.2 low privilege users were able to act on administrative monitors due to them not being consistently protected by permission checks (SECURITY-371).","exploit_maturity":"No public exploit","published":"2018-05-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-2602","description":"jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents (SECURITY-358).","exploit_maturity":"No public exploit","published":"2018-05-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-2600","description":"In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. These included system configuration and runtime information of these nodes (SECURITY-343).","exploit_maturity":"No public exploit","published":"2018-05-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1261","description":"Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z) that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.","exploit_maturity":"No public exploit","published":"2018-05-11","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1257","description":"Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a regular expression, denial of service attack.","exploit_maturity":"No public exploit","published":"2018-05-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-8627","description":"admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that allows logs to be available via GET requests making them vulnerable to cross-origin attacks. An attacker could trigger the user's browser to request the log files consuming enough resources that normal server functioning could be impaired.","exploit_maturity":"No public exploit","published":"2018-05-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000177","description":"A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in src/main/resources/hudson/plugins/s3/S3ArtifactsProjectAction/jobMain.jelly that allows attackers able to control file names of uploaded files to define file names containing JavaScript that would be executed in another user's browser when that user performs some UI actions.","exploit_maturity":"No public exploit","published":"2018-05-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000176","description":"An exposure of sensitive information vulnerability exists in Jenkins Email Extension Plugin 2.61 and older in src/main/resources/hudson/plugins/emailext/ExtendedEmailPublisher/global.groovy and ExtendedEmailPublisherDescriptor.java that allows attackers with control of a Jenkins administrator's web browser (e.g. malicious extension) to retrieve the configured SMTP password.","exploit_maturity":"No public exploit","published":"2018-05-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000175","description":"A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arbitrary files on the Jenkins master.","exploit_maturity":"No public exploit","published":"2018-05-08","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1000174","description":"An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows attackers to redirect users to an arbitrary URL after successful login.","exploit_maturity":"No public exploit","published":"2018-05-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000173","description":"A session fixaction vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session.","exploit_maturity":"No public exploit","published":"2018-05-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-2611","description":"Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes (SECURITY-389). The URLs /workspaceCleanup and /fingerprintCleanup did not perform permission checks, allowing users with read access to Jenkins to trigger these background processes (that are otherwise performed daily), possibly causing additional load on Jenkins master and agents.","exploit_maturity":"No public exploit","published":"2018-05-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-2606","description":"Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible (SECURITY-380). This only affects anonymous users (other users legitimately have access) that were able to get a list of items via an UnprotectedRootAction.","exploit_maturity":"No public exploit","published":"2018-05-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1743","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console panel fields. When exploited an attacker could browse the file system. IBM X-Force ID: 134933.","exploit_maturity":"No public exploit","published":"2018-05-04","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-10237","description":"Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.","exploit_maturity":"No public exploit","published":"2018-04-26","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-15691","description":"In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.","exploit_maturity":"No public exploit","published":"2018-04-26","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1339","description":"A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18.","exploit_maturity":"No public exploit","published":"2018-04-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1338","description":"A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18.","exploit_maturity":"No public exploit","published":"2018-04-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1059","description":"The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.","exploit_maturity":"No public exploit","published":"2018-04-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-2878","description":"Vulnerability in the PeopleSoft Enterprise HCM Shared Components component of Oracle PeopleSoft Products (subcomponent: Notepad). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Shared Components. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HCM Shared Components, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Shared Components accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Shared Components accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2874","description":"Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Logging). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows physical access to compromise Oracle Application Object Library. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Object Library accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2873","description":"Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Account Hierarchy Manager). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle General Ledger. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle General Ledger accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2872","description":"Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Account Hierarchy Manager). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle General Ledger. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle General Ledger accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2869","description":"Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent: General Utilities). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Human Resources. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Human Resources accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2868","description":"Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent: General Utilities). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Human Resources. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Human Resources accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2867","description":"Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2866","description":"Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Consolidation Hierarchy Viewer). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle General Ledger. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle General Ledger accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2865","description":"Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Consolidation Hierarchy Viewer). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle General Ledger. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle General Ledger accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2864","description":"Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2861","description":"Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Back Office. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Retail Back Office accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Back Office. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2859","description":"Vulnerability in the Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach component of Oracle Financial Services Applications (subcomponent: Portfolio, Attribution). The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach accessible data as well as unauthorized read access to a subset of Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2854","description":"Vulnerability in the Oracle Financial Services Basel Regulatory Capital Basic component of Oracle Financial Services Applications (subcomponent: Portfolio, Attribution). The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Basel Regulatory Capital Basic. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Basel Regulatory Capital Basic, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Basel Regulatory Capital Basic accessible data as well as unauthorized read access to a subset of Oracle Financial Services Basel Regulatory Capital Basic accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2853","description":"Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations, Client Application Loader). Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony First Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony First Edition accessible data as well as unauthorized read access to a subset of Oracle Hospitality Simphony First Edition accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2852","description":"Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. While the vulnerability is in Oracle Hospitality Guest Access, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Guest Access accessible data as well as unauthorized read access to a subset of Oracle Hospitality Guest Access accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2847","description":"Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations). Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony First Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Simphony First Edition accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2838","description":"Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: EPPCM_HIER_TOP). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2823","description":"Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Database). The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Transportation Management accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2821","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Rich Text Editor). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2820","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2815","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-2809","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Homepage \u0026 Navigation). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2807","description":"Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Securities). Supported versions that are affected are 11.5.0, 11.6.0 and 11.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Core Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Core Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Core Banking accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2802","description":"Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Client Application Loader). Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data as well as unauthorized read access to a subset of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2800","description":"Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-2799","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-2798","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-2797","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-2796","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-2795","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-2793","description":"Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PsAdmin). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PT PeopleTools executes to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2789","description":"Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Services). The supported version that is affected is 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core - Server Framework. While the vulnerability is in Siebel Core - Server Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Core - Server Framework accessible data. CVSS 3.0 Base Score 5.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2788","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2785","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Stylesheet). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2760","description":"Vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: OSSL Module). Supported versions that are affected are 12.1.3 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle HTTP Server accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2756","description":"Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications (subcomponent: WebUI). Supported versions that are affected are 7.2.4.3.0, 7.3.0.1.x, 7.3.1.0.7 and 7.3.5.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Order and Service Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications Order and Service Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Communications Order and Service Management accessible data. CVSS 3.0 Base Score 6.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2752","description":"Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HCM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2749","description":"Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Banking Corporate Lending, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Corporate Lending accessible data as well as unauthorized read access to a subset of Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2748","description":"Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Banking Corporate Lending, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Corporate Lending accessible data as well as unauthorized read access to a subset of Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2747","description":"Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2738","description":"Vulnerability in the Oracle Retail Central Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Central Office. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Central Office accessible data as well as unauthorized read access to a subset of Oracle Retail Central Office accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2737","description":"Vulnerability in the Oracle Retail Returns Management component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 2.3.8, 2.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Returns Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Returns Management accessible data as well as unauthorized read access to a subset of Oracle Retail Returns Management accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2587","description":"Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). Supported versions that are affected are 10.1.4.3.0, 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Access Manager accessible data as well as unauthorized read access to a subset of Oracle Access Manager accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-2572","description":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: Installation). Supported versions that are affected are 6.1.1.6, 6.2.0.0 and 6.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile Product Lifecycle Management for Process, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile Product Lifecycle Management for Process accessible data as well as unauthorized read access to a subset of Oracle Agile Product Lifecycle Management for Process accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-04-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-1325","description":"In Apache wicket-jquery-ui \u003c= 6.29.0, \u003c= 7.10.1, \u003c= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display.","exploit_maturity":"No public exploit","published":"2018-04-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-12196","description":"undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP request line. This allows the attacker to cause a MITM attack and access the desired content on the server.","exploit_maturity":"No public exploit","published":"2018-04-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-5382","description":"The default BKS keystore use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS keystore. Bouncy Castle release 1.47 changes the BKS format to a format which uses a 160 bit HMAC instead. This applies to any BKS keystore generated prior to BC 1.47. For situations where people need to create the files for legacy reasons a specific keystore type \"BKS-V1\" was introduced in 1.49. It should be noted that the use of \"BKS-V1\" is discouraged by the library authors and should only be used where it is otherwise safe to do so, as in where the use of a 16 bit checksum for the file integrity check is not going to cause a security issue in itself.","exploit_maturity":"No public exploit","published":"2018-04-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000169","description":"An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.","exploit_maturity":"No public exploit","published":"2018-04-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-2599","description":"Jenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficient permission check. This allows users with permissions to create new items (e.g. jobs) to overwrite existing items they don't have access to (SECURITY-321).","exploit_maturity":"No public exploit","published":"2018-04-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1271","description":"Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to the classpath, or the ServletContext), a malicious user can send a request using a specially crafted URL that can lead a directory traversal attack.","exploit_maturity":"Working exploit published","published":"2018-04-06","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1000152","description":"An improper authorization vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, ConvertToVm.java, Delete.java, DeleteSnapshot.java, Deploy.java, ExposeGuestInfo.java, FolderVSphereCloudProperty.java, PowerOff.java, PowerOn.java, Reconfigure.java, Rename.java, RenameSnapshot.java, RevertToSnapshot.java, SuspendVm.java, TakeSnapshot.java, VSphereBuildStepContainer.java, vSphereCloudProvisionedSlave.java, vSphereCloudSlave.java, vSphereCloudSlaveTemplate.java, VSphereConnectionConfig.java, vSphereStep.java that allows attackers to perform form validation related actions, including sending numerous requests to the configured vSphere server, potentially resulting in denial of service, or send credentials stored in Jenkins with known ID to an attacker-specified server (\"test connection\").","exploit_maturity":"No public exploit","published":"2018-04-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000151","description":"A man in the middle vulnerability exists in Jenkins vSphere Plugin 2.16 and older in VSphere.java that disables SSL/TLS certificate validation by default.","exploit_maturity":"No public exploit","published":"2018-04-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000149","description":"A man in the middle vulnerability exists in Jenkins Ansible Plugin 0.8 and older in AbstractAnsibleInvocation.java, AnsibleAdHocCommandBuilder.java, AnsibleAdHocCommandInvocationTest.java, AnsibleContext.java, AnsibleJobDslExtension.java, AnsiblePlaybookBuilder.java, AnsiblePlaybookStep.java that disables host key verification by default.","exploit_maturity":"No public exploit","published":"2018-04-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000148","description":"An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system.","exploit_maturity":"No public exploit","published":"2018-04-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000147","description":"An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with insufficient permission to obtain Perforce passwords configured in jobs to obtain them","exploit_maturity":"No public exploit","published":"2018-04-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000145","description":"An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with local file system access to obtain encrypted Perforce passwords and decrypt them.","exploit_maturity":"No public exploit","published":"2018-04-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000144","description":"A cross site scripting vulnerability exists in Jenkins Cucumber Living Documentation Plugin 1.0.12 and older in CukedoctorBaseAction#doDynamic that disables the Content-Security-Policy protection for archived artifacts and workspace files, allowing attackers able to control the content of these files to attack Jenkins users.","exploit_maturity":"No public exploit","published":"2018-04-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000143","description":"An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials.","exploit_maturity":"No public exploit","published":"2018-04-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-6660","description":"Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file.","exploit_maturity":"No public exploit","published":"2018-04-02","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-6659","description":"Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input.","exploit_maturity":"No public exploit","published":"2018-04-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-9159","description":"In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory traversal sequences. NOTE: this product is unrelated to Ignite Realtime Spark.","exploit_maturity":"No public exploit","published":"2018-03-31","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-1788","description":"IBM WebSphere Application Server 9 installations using Form Login could allow a remote attacker to conduct spoofing attacks. IBM X-Force ID: 137031.","exploit_maturity":"No public exploit","published":"2018-03-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-1229","description":"Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature. An unauthenticated malicious user with network access to Spring Batch Admin could store an arbitrary web script that would be executed by other users. This issue has not been patched because Spring Batch Admin has reached end of life.","exploit_maturity":"No public exploit","published":"2018-03-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1322","description":"An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can recover sensitive security values using the fiql and orderby parameters.","exploit_maturity":"Working exploit published","published":"2018-03-20","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2018-1196","description":"Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the \"run_user\" to overwrite and take ownership of any file on the same system. In order to instigate the attack, the application must be installed as a service and the \"run_user\" requires shell access to the server. Spring Boot application that are not installed as a service, or are not using the embedded launch script are not susceptible.","exploit_maturity":"No public exploit","published":"2018-03-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1324","description":"A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress' zip package.","exploit_maturity":"No public exploit","published":"2018-03-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-1199","description":"Spring Security (Spring Security 4.1.x before 4.1.5, 4.2.x before 4.2.4, and 5.0.x before 5.0.1; and Spring Framework 4.3.x before 4.3.14 and 5.0.x before 5.0.3) does not consider URL path parameters when processing security constraints. By adding a URL path parameter with special encodings, an attacker may be able to bypass a security constraint. The root cause of this issue is a lack of clarity regarding the handling of path parameters in the Servlet Specification. Some Servlet containers include path parameters in the value returned for getPathInfo() and some do not. Spring Security uses the value returned by getPathInfo() as part of the process of mapping requests to security constraints. In this particular attack, different character encodings used in path parameters allows secured Spring MVC static resource URLs to be bypassed.","exploit_maturity":"No public exploit","published":"2018-03-16","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2018-1000129","description":"An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.","exploit_maturity":"Working exploit published","published":"2018-03-14","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2017-1741","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console panel fields. When exploited an attacker could read files on the file system. IBM X-Force ID: 134931.","exploit_maturity":"No public exploit","published":"2018-03-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-1000114","description":"An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions.","exploit_maturity":"No public exploit","published":"2018-03-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000113","description":"A cross-site scripting vulnerability exists in Jenkins TestLink Plugin 2.12 and earlier in TestLinkBuildAction/summary.jelly and others that allow an attacker who can control e.g. TestLink report names to have Jenkins serve arbitrary HTML and JavaScript","exploit_maturity":"No public exploit","published":"2018-03-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000112","description":"An improper authorization vulnerability exists in Jenkins Mercurial Plugin version 2.2 and earlier in MercurialStatus.java that allows an attacker with network access to obtain a list of nodes and users.","exploit_maturity":"No public exploit","published":"2018-03-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000111","description":"An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users.","exploit_maturity":"No public exploit","published":"2018-03-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000110","description":"An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access to obtain a list of nodes and users.","exploit_maturity":"No public exploit","published":"2018-03-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000109","description":"An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs.","exploit_maturity":"No public exploit","published":"2018-03-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000108","description":"A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed.","exploit_maturity":"No public exploit","published":"2018-03-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000107","description":"An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in OwnershipDescription.java, JobOwnerJobProperty.java, and OwnerNodeProperty.java that allow an attacker with Job/Configure or Computer/Configure permission and without Ownership related permissions to override ownership metadata.","exploit_maturity":"No public exploit","published":"2018-03-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000106","description":"An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to modify the Gerrit configuration in Jenkins.","exploit_maturity":"No public exploit","published":"2018-03-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000105","description":"An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to retrieve some configuration information about Gerrit in Jenkins.","exploit_maturity":"No public exploit","published":"2018-03-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-2585","description":"Red Hat Keycloak before version 2.5.1 has an implementation of HMAC verification for JWS tokens that uses a method that runs in non-constant time, potentially leaving the application vulnerable to timing attacks.","exploit_maturity":"No public exploit","published":"2018-03-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-15719","description":"In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor.","exploit_maturity":"No public exploit","published":"2018-03-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-8629","description":"Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion requests sent to the rest server. An attacker with service account authentication could use this flaw to bypass normal permissions and delete users in a separate realm.","exploit_maturity":"No public exploit","published":"2018-03-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-9585","description":"Red Hat JBoss EAP version 5 is vulnerable to a deserialization of untrusted data in the JMX endpoint when deserializes the credentials passed to it. An attacker could exploit this vulnerability resulting in a denial of service attack.","exploit_maturity":"No public exploit","published":"2018-03-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1286","description":"In Apache OpenMeetings 3.0.0 - 4.0.1, CRUD operations on privileged users are not password protected allowing an authenticated attacker to deny service for privileged users.","exploit_maturity":"No public exploit","published":"2018-02-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-3536","description":"Two XSS vulnerabilities were fixed in message list and view in the Hupa Webmail application from the Apache James project. An attacker could send a carefully crafted email to a user of Hupa which would trigger a XSS when the email was opened or when a list of messages were viewed. This issue was addressed in Hupa 0.0.3.","exploit_maturity":"No public exploit","published":"2018-02-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-6356","description":"Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read permission to download files from the Jenkins master they should not have access to. On Windows, any file accessible to the Jenkins master process could be downloaded. On other operating systems, any file within the Jenkins home directory accessible to the Jenkins master process could be downloaded.","exploit_maturity":"No public exploit","published":"2018-02-20","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-15712","description":"Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Oozie server process. The malicious user can construct a workflow XML file containing XML directives and configuration that reference sensitive files on the Oozie server host.","exploit_maturity":"No public exploit","published":"2018-02-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-8750","description":"Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDAP injection attacks leading to a denial of service.","exploit_maturity":"No public exploit","published":"2018-02-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000068","description":"An improper input validation vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to access plugin resource files in the META-INF and WEB-INF directories that should not be accessible, if the Jenkins home directory is on a case-insensitive file system.","exploit_maturity":"No public exploit","published":"2018-02-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000067","description":"An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submit HTTP GET requests and get limited information about the response.","exploit_maturity":"No public exploit","published":"2018-02-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1298","description":"A Denial of Service vulnerability was found in Apache Qpid Broker-J 7.0.0 in functionality for authentication of connections for AMQP protocols 0-8, 0-9, 0-91 and 0-10 when PLAIN or XOAUTH2 SASL mechanism is used. The vulnerability allows unauthenticated attacker to crash the broker instance. AMQP 1.0 and HTTP connections are not affected. An authentication of incoming AMQP connections in Apache Qpid Broker-J is performed by special entities called \"Authentication Providers\". Each Authentication Provider can support several SASL mechanisms which are offered to the connecting clients as part of SASL negotiation process. The client chooses the most appropriate SASL mechanism for authentication. Authentication Providers of following types supports PLAIN SASL mechanism: Plain, PlainPasswordFile, SimpleLDAP, Base64MD5PasswordFile, MD5, SCRAM-SHA-256, SCRAM-SHA-1. XOAUTH2 SASL mechanism is supported by Authentication Providers of type OAuth2. If an AMQP port is configured with any of these Authentication Providers, the Broker may be vulnerable.","exploit_maturity":"No public exploit","published":"2018-02-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1000057","description":"Jenkins Credentials Binding Plugin 1.14 and earlier masks passwords it provides to build processes in their build logs. Jenkins however transforms provided password values, e.g. replacing environment variable references, which could result in values different from but similar to configured passwords being provided to the build. Those values are not subject to masking, and could allow unauthorized users to recover the original password.","exploit_maturity":"No public exploit","published":"2018-02-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-15706","description":"As part of the fix for bug 61201, the documentation for Apache Tomcat 9.0.0.M22 to 9.0.1, 8.5.16 to 8.5.23, 8.0.45 to 8.0.47 and 7.0.79 to 7.0.82 included an updated description of the search algorithm used by the CGI Servlet to identify which script to execute. The update was not correct. As a result, some scripts may have failed to execute as expected and other scripts may have been executed unexpectedly. Note that the behaviour of the CGI servlet has remained unchanged in this regard. It is only the documentation of the behaviour that was wrong and has been corrected.","exploit_maturity":"No public exploit","published":"2018-01-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000355","description":"Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an XStream: Java crash when trying to instantiate void/Void.","exploit_maturity":"No public exploit","published":"2018-01-29","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-1000404","description":"The Jenkins Delivery Pipeline Plugin version 1.0.7 and earlier used the unescaped content of the query parameter 'fullscreen' in its JavaScript, resulting in a cross-site scripting vulnerability through specially crafted URLs.","exploit_maturity":"No public exploit","published":"2018-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000402","description":"Jenkins Swarm Plugin Client 3.4 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks.","exploit_maturity":"No public exploit","published":"2018-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000400","description":"The Jenkins 2.73.1 and earlier, 2.83 and earlier remote API at /job/(job-name)/api contained information about upstream and downstream projects. This included information about tasks that the current user otherwise has no access to, e.g. due to lack of Item/Read permission. This has been fixed, and the API now only lists upstream and downstream projects that the current user has access to.","exploit_maturity":"No public exploit","published":"2018-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000399","description":"The Jenkins 2.73.1 and earlier, 2.83 and earlier remote API at /queue/item/(ID)/api showed information about tasks in the queue (typically builds waiting to start). This included information about tasks that the current user otherwise has no access to, e.g. due to lack of Item/Read permission. This has been fixed, and the API endpoint is now only available for tasks that the current user has access to.","exploit_maturity":"No public exploit","published":"2018-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000398","description":"The remote API in Jenkins 2.73.1 and earlier, 2.83 and earlier at /computer/(agent-name)/api showed information about tasks (typically builds) currently running on that agent. This included information about tasks that the current user otherwise has no access to, e.g. due to lack of Item/Read permission. This has been fixed, and the API now only shows information about accessible tasks.","exploit_maturity":"No public exploit","published":"2018-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000397","description":"Jenkins Maven Plugin 2.17 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. Maven Plugin 3.0 no longer has a dependency on commons-httpclient.","exploit_maturity":"No public exploit","published":"2018-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000396","description":"Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. This library is widely used as a transitive dependency in Jenkins plugins. The fix for CVE-2012-6153 was backported to the version of commons-httpclient that is bundled in core and made available to plugins.","exploit_maturity":"No public exploit","published":"2018-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000395","description":"Jenkins 2.73.1 and earlier, 2.83 and earlier provides information about Jenkins user accounts which is generally available to anyone with Overall/Read permissions via the /user/(username)/api remote API. This included e.g. Jenkins users' email addresses if the Mailer Plugin is installed. The remote API now no longer includes information beyond the most basic (user ID and name) unless the user requesting it is a Jenkins administrator.","exploit_maturity":"No public exploit","published":"2018-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000392","description":"Jenkins 2.88 and earlier; 2.73.2 and earlier Autocompletion suggestions for text fields were not escaped, resulting in a persisted cross-site scripting vulnerability if the source for the suggestions allowed specifying text that includes HTML metacharacters like less-than and greater-than characters.","exploit_maturity":"No public exploit","published":"2018-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000390","description":"Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build.","exploit_maturity":"No public exploit","published":"2018-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000389","description":"Some URLs provided by Jenkins global-build-stats plugin version 1.4 and earlier returned a JSON response that contained request parameters. These responses had the Content Type: text/html, so could have been interpreted as HTML by clients, resulting in a potential reflected cross-site scripting vulnerability. Additionally, some URLs provided by global-build-stats plugin that modify data did not require POST requests to be sent, resulting in a potential cross-site request forgery vulnerability.","exploit_maturity":"No public exploit","published":"2018-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000388","description":"Jenkins Dependency Graph Viewer plugin 0.12 and earlier did not perform permission checks for the API endpoint that modifies the dependency graph, allowing anyone with Overall/Read permission to modify this data.","exploit_maturity":"No public exploit","published":"2018-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000386","description":"Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown on the 'Build With Parameters' page through the 'Active Choices Reactive Reference Parameter' type. This could include, for example, arbitrary JavaScript. Active Choices now sanitizes the HTML inserted on the 'Build With Parameters' page if and only if the script is executed in a sandbox. As unsandboxed scripts are subject to administrator approval, it is up to the administrator to allow or disallow problematic script output.","exploit_maturity":"No public exploit","published":"2018-01-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-15703","description":"Any authenticated user (valid client certificate but without ACL permissions) could upload a template which contained malicious code and caused a denial of service via Java deserialization attack. The fix to properly handle Java deserialization was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the appropriate release.","exploit_maturity":"No public exploit","published":"2018-01-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-1000505","description":"In Jenkins Script Security Plugin version 1.36 and earlier, users with the ability to configure sandboxed Groovy scripts are able to use a type coercion feature in Groovy to create new `File` objects from strings. This allowed reading arbitrary files on the Jenkins master file system. Such a type coercion is now subject to sandbox protection and considered to be a call to the `new File(String)` constructor for the purpose of in-process script approval.","exploit_maturity":"No public exploit","published":"2018-01-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1047","description":"A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.","exploit_maturity":"No public exploit","published":"2018-01-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-1000015","description":"On Jenkins instances with Authorize Project plugin, the authentication associated with a build may lack the Computer/Build permission on some agents. This did not prevent the execution of Pipeline `node` blocks on those agents due to incorrect permissions checks in Pipeline: Nodes and Processes plugin 2.17 and earlier.","exploit_maturity":"No public exploit","published":"2018-01-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-15713","description":"Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct a configuration file containing XML directives that reference sensitive files on the MapReduce job history server host.","exploit_maturity":"No public exploit","published":"2018-01-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-2732","description":"Vulnerability in the Oracle Financial Services Analytical Applications Reconciliation Framework component of Oracle Financial Services Applications (subcomponent: User Interface). The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Reconciliation Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Analytical Applications Reconciliation Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Reconciliation Framework accessible data as well as unauthorized read access to a subset of Oracle Financial Services Analytical Applications Reconciliation Framework accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2731","description":"Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition Status). Supported versions that are affected are 9.1 and 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise SCM eProcurement accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise SCM eProcurement accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2730","description":"Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications (subcomponent: Cross Pillar). The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Merchandising System. While the vulnerability is in Oracle Retail Merchandising System, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Merchandising System accessible data as well as unauthorized read access to a subset of Oracle Retail Merchandising System accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2728","description":"Vulnerability in the Oracle Financial Services Funds Transfer Pricing component of Oracle Financial Services Applications (subcomponent: User Interface). Supported versions that are affected are 6.1.x and 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Funds Transfer Pricing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Funds Transfer Pricing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Funds Transfer Pricing accessible data as well as unauthorized read access to a subset of Oracle Financial Services Funds Transfer Pricing accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2722","description":"Vulnerability in the Oracle Financial Services Price Creation and Discovery component of Oracle Financial Services Applications (subcomponent: User Interface). The supported version that is affected is 8.0.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Price Creation and Discovery. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Price Creation and Discovery, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Price Creation and Discovery accessible data as well as unauthorized read access to a subset of Oracle Financial Services Price Creation and Discovery accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2719","description":"Vulnerability in the Oracle Financial Services Hedge Management and IFRS Valuations component of Oracle Financial Services Applications (subcomponent: User Interface). The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Hedge Management and IFRS Valuations. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Hedge Management and IFRS Valuations, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Hedge Management and IFRS Valuations accessible data as well as unauthorized read access to a subset of Oracle Financial Services Hedge Management and IFRS Valuations accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2716","description":"Vulnerability in the Oracle Financial Services Market Risk Measurement and Management component of Oracle Financial Services Applications (subcomponent: User Interface). The supported version that is affected is 8.0.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Market Risk Measurement and Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Market Risk Measurement and Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Market Risk Measurement and Management accessible data as well as unauthorized read access to a subset of Oracle Financial Services Market Risk Measurement and Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2715","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: BI Platform Security). Supported versions that are affected are 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2714","description":"Vulnerability in the Oracle Financial Services Market Risk component of Oracle Financial Services Applications (subcomponent: User Interface). The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Market Risk. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Market Risk, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Market Risk accessible data as well as unauthorized read access to a subset of Oracle Financial Services Market Risk accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2712","description":"Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning component of Oracle Financial Services Applications (subcomponent: User Interface). The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Loan Loss Forecasting and Provisioning. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Loan Loss Forecasting and Provisioning, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Loan Loss Forecasting and Provisioning accessible data as well as unauthorized read access to a subset of Oracle Financial Services Loan Loss Forecasting and Provisioning accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2709","description":"Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2708","description":"Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Payments accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2702","description":"Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FSCM accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2695","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2692","description":"Vulnerability in the Oracle Financial Services Asset Liability Management component of Oracle Financial Services Applications (subcomponent: User Interface). Supported versions that are affected are 6.1.x and 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Asset Liability Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Asset Liability Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Asset Liability Management accessible data as well as unauthorized read access to a subset of Oracle Financial Services Asset Liability Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2691","description":"Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: Proxy User Delegation). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle User Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle User Management accessible data as well as unauthorized read access to a subset of Oracle User Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2684","description":"Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: Registration Process). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle User Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle User Management accessible data. CVSS 3.0 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2682","description":"Vulnerability in the Oracle Financial Services Liquidity Risk Management component of Oracle Financial Services Applications (subcomponent: User Interface). The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Liquidity Risk Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Liquidity Risk Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Liquidity Risk Management accessible data as well as unauthorized read access to a subset of Oracle Financial Services Liquidity Risk Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2681","description":"Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Human Resources accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2678","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-2677","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2018-2674","description":"Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff). Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Direct Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Direct Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2673","description":"Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: POS). Supported versions that are affected are 2.7, 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2671","description":"Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products (subcomponent: Supplier Registration). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Purchasing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise SCM Purchasing accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2670","description":"Vulnerability in the Oracle Financial Services Profitability Management component of Oracle Financial Services Applications (subcomponent: User Interface). Supported versions that are affected are 6.1.x and 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Profitability Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Profitability Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Profitability Management accessible data as well as unauthorized read access to a subset of Oracle Financial Services Profitability Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2669","description":"Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2663","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-2662","description":"Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 6.2.11, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7 and 6.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Transportation Management accessible data as well as unauthorized read access to a subset of Oracle Transportation Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2661","description":"Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 7.3.5.x and 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Analytical Applications Infrastructure, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2659","description":"Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime SEC). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2658","description":"Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime SEC). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2657","description":"Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u171 and 7u161; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-2654","description":"Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products (subcomponent: Company Dir / Org Chart Viewer). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HCM Human Resources, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Human Resources accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2653","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Connected Query). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2644","description":"Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Worklist). Supported versions that are affected are 7.x, 8.0.x and 8.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Argus Safety. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Argus Safety, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Argus Safety accessible data as well as unauthorized read access to a subset of Oracle Argus Safety accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2643","description":"Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Case Selection). Supported versions that are affected are 7.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety. While the vulnerability is in Oracle Argus Safety, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Argus Safety accessible data as well as unauthorized read access to a subset of Oracle Argus Safety accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2642","description":"Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: File Upload). Supported versions that are affected are 7.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Argus Safety, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Argus Safety accessible data as well as unauthorized read access to a subset of Oracle Argus Safety accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Argus Safety. CVSS 3.0 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2641","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2018-2635","description":"Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Login). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data as well as unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2634","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS). Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2018-2632","description":"Vulnerability in the Siebel Engineering - Installer and Deployment component of Oracle Siebel CRM (subcomponent: Siebel Approval Manager). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Engineering - Installer and Deployment. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Engineering - Installer and Deployment accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2631","description":"Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 6.2.11, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.1, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Transportation Management accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2630","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Security Management System). Supported versions that are affected are 11.5.0, 11.6.0 and 11.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2629","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2626","description":"Vulnerability in the Oracle Financial Services Balance Sheet Planning component of Oracle Financial Services Applications (subcomponent: User Interface). The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Balance Sheet Planning. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Balance Sheet Planning, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Balance Sheet Planning accessible data as well as unauthorized read access to a subset of Oracle Financial Services Balance Sheet Planning accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2625","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2619","description":"Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security). The supported version that is affected is 2.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2618","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-2614","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2610","description":"Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion (subcomponent: Access and security). The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Hyperion Data Relationship Management accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2609","description":"Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2607","description":"Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Guest Access. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2606","description":"Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality Guest Access executes to compromise Oracle Hospitality Guest Access. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Guest Access accessible data. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2605","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2603","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-2602","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded executes to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2018-2599","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-2595","description":"Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: Foundation UI \u0026 Servlets). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion BI+. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hyperion BI+ accessible data as well as unauthorized read access to a subset of Hyperion BI+ accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Hyperion BI+. CVSS 3.0 Base Score 4.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2594","description":"Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: Foundation UI \u0026 Servlets). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion BI+. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hyperion BI+ accessible data as well as unauthorized read access to a subset of Hyperion BI+ accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Hyperion BI+. CVSS 3.0 Base Score 4.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2588","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2018-2584","description":"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is 11.1.1.8.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2580","description":"Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: ADPatch). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Applications DBA executes to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Applications DBA accessible data. CVSS 3.0 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2571","description":"Vulnerability in the Oracle Communications Unified Inventory Management component of Oracle Communications Applications (subcomponent: Portal). Supported versions that are affected are 7.2.4.2.x and 7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Unified Inventory Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Unified Inventory Management accessible data as well as unauthorized read access to a subset of Oracle Communications Unified Inventory Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2570","description":"Vulnerability in the Oracle Communications Unified Inventory Management component of Oracle Communications Applications (subcomponent: Portal). Supported versions that are affected are 7.2.4.2.x and 7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Unified Inventory Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Unified Inventory Management accessible data as well as unauthorized read access to a subset of Oracle Communications Unified Inventory Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Unified Inventory Management. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2567","description":"Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications (subcomponent: Portal). Supported versions that are affected are 7.2.4.1.x, 7.2.4.2.x, 7.3.0.x.x and 7.3.0.1.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Order and Service Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Order and Service Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Order and Service Management accessible data as well as unauthorized read access to a subset of Oracle Communications Order and Service Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2018-2561","description":"Vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: Web Listener). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle HTTP Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-12197","description":"It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-10273","description":"Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: Deployment). Supported versions that are affected are 11.1.1.7.0, 11.1.1.7.1, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle JDeveloper executes to compromise Oracle JDeveloper. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle JDeveloper, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle JDeveloper accessible data as well as unauthorized read access to a subset of Oracle JDeveloper accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle JDeveloper. CVSS 3.0 Base Score 4.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L).","exploit_maturity":"Working exploit published","published":"2018-01-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-10262","description":"Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). The supported version that is affected is 11.1.2.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Access Manager accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2018-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-9796","description":"When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries containing a region name as a bind parameter that allow read access to objects within unauthorized regions.","exploit_maturity":"No public exploit","published":"2018-01-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-7559","description":"In Undertow 2.x before 2.0.0.Alpha2, 1.4.x before 1.4.17.Final, and 1.3.x before 1.3.31.Final, it was found that the fix for CVE-2017-2666 was incomplete and invalid characters are still allowed in the query string and path parameters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.","exploit_maturity":"No public exploit","published":"2018-01-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-15717","description":"A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and org.apache.sling.xss.impl.XSSFilterImpl#isValidHref allows special crafted URLs to pass as valid, although they carry XSS payloads. The affected versions are Apache Sling XSS Protection API 1.0.4 to 1.0.18, Apache Sling XSS Protection API Compat 1.1.0 and Apache Sling XSS Protection API 2.0.0.","exploit_maturity":"No public exploit","published":"2018-01-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-6810","description":"In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console. The root cause of this issue is improper user data output validation.","exploit_maturity":"No public exploit","published":"2018-01-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3607","description":"DefaultHostnameVerifier in Ldaptive (formerly vt-ldap) does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.","exploit_maturity":"No public exploit","published":"2018-01-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2018-1190","description":"An issue was discovered in these Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA bosh v30.x versions prior to v30.8 and all other versions prior to v45.0. A cross-site scripting (XSS) attack is possible in the clientId parameter of a request to the UAA OpenID Connect check session iframe endpoint used for single logout session management.","exploit_maturity":"No public exploit","published":"2018-01-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-17837","description":"The Apache DeltaSpike-JSF 1.8.0 module has a XSS injection leak in the windowId handling. The default size of the windowId get's cut off after 10 characters (by default), so the impact might be limited. A fix got applied and released in Apache deltaspike-1.8.1.","exploit_maturity":"No public exploit","published":"2018-01-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000425","description":"Cross-site scripting (XSS) vulnerability in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and older allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the \"movie\" parameter.","exploit_maturity":"No public exploit","published":"2018-01-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-4578","description":"jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.","exploit_maturity":"No public exploit","published":"2017-12-29","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2017-12630","description":"In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML which will take effect on Profile page afterwards. Example: after submitting special script that returns cookie information from Query page, malicious user may obtain this information from Profile page afterwards.","exploit_maturity":"No public exploit","published":"2017-12-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-17383","description":"Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624.","exploit_maturity":"No public exploit","published":"2017-12-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-15707","description":"In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload.","exploit_maturity":"No public exploit","published":"2017-12-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-8039","description":"An issue was discovered in Pivotal Spring Web Flow through 2.4.5. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default (i.e., set to 'false') can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data binding property mappings. NOTE: this issue exists because of an incomplete fix for CVE-2017-4971.","exploit_maturity":"No public exploit","published":"2017-11-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-8031","description":"An issue was discovered in Cloud Foundry Foundation cf-release (all versions prior to v279) and UAA (30.x versions prior to 30.6, 45.x versions prior to 45.4, 52.x versions prior to 52.1). In some cases, the UAA allows an authenticated user for a particular client to revoke client tokens for other users on the same client. This occurs only if the client is using opaque tokens or JWT tokens validated using the check_token endpoint. A malicious actor could cause denial of service.","exploit_maturity":"No public exploit","published":"2017-11-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000221","description":"In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will handle the access control incorrectly so that users only need to match part of the user name used for the access restriction. For example, a user with the role ROLE_USER will have access to recordings published only for ROLE_USER_X.","exploit_maturity":"No public exploit","published":"2017-11-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000209","description":"The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL/TLS servers via an arbitrary valid certificate.","exploit_maturity":"No public exploit","published":"2017-11-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-0219","description":"Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.","exploit_maturity":"No public exploit","published":"2017-11-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-12624","description":"Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service (DoS) attack on a CXF web service provider. Both JAX-WS and JAX-RS services are vulnerable to this attack. From Apache CXF 3.2.1 and 3.1.14, message attachment headers that are greater than 300 characters will be rejected by default. This value is configurable via the property \"attachment-max-header-size\".","exploit_maturity":"No public exploit","published":"2017-11-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-12625","description":"Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1 expose an interface through which masking policies can be defined on tables or views, e.g., using Apache Ranger. When a view is created over a given table, the policy enforcement does not happen correctly on the table for masked columns.","exploit_maturity":"No public exploit","published":"2017-11-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000243","description":"Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites","exploit_maturity":"No public exploit","published":"2017-11-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-15911","description":"The Admin Console in Ignite Realtime Openfire Server before 4.1.7 allows arbitrary client-side JavaScript code execution on victims who click a crafted setup/setup-host-settings.jsp?domain= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication channels, etc. The vulnerability is present after login into the application.","exploit_maturity":"No public exploit","published":"2017-10-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-12158","description":"It was found that Keycloak would accept a HOST header URL in the admin console and use it to determine web resource locations. An attacker could use this flaw against an authenticated user to attain reflected XSS via a malicious server.","exploit_maturity":"No public exploit","published":"2017-10-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-10427","description":"Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). Supported versions that are affected are 6.0.11, 6.5.11, 7.0.6, 7.1.6 and 15.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Point of Service. While the vulnerability is in Oracle Retail Xstore Point of Service, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Xstore Point of Service accessible data as well as unauthorized read access to a subset of Oracle Retail Xstore Point of Service accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Xstore Point of Service. CVSS 3.0 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10425","description":"Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Service Host). Supported versions that are affected are 2.6, 2.7, 2.8 and 2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data as well as unauthorized read access to a subset of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10423","description":"Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Back Office. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Retail Back Office, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Back Office accessible data as well as unauthorized read access to a subset of Oracle Retail Back Office accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10422","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant). The supported version that is affected is 8.54. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10421","description":"Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10420","description":"Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Suite8. While the vulnerability is in Oracle Hospitality Suite8, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Suite8 accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Suite8. CVSS 3.0 Base Score 6.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10419","description":"Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: PMS). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality Suite8 executes to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Suite8 accessible data as well as unauthorized read access to a subset of Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 5.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10418","description":"Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PeopleSoft CDA). The supported version that is affected is 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. While the vulnerability is in PeopleSoft Enterprise PT PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PT PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10406","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10400","description":"Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration Graphical User Interface). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data as well as unauthorized read access to a subset of Oracle GlassFish Server accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10397","description":"Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: BaseMasterPage). The supported version that is affected is 9.0.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Cruise Fleet Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Fleet Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Fleet Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10395","description":"Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: GangwayActivityWebApp). The supported version that is affected is 9.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Fleet Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Fleet Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10394","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10393","description":"Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data as well as unauthorized read access to a subset of Oracle GlassFish Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GlassFish Server. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10389","description":"Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: PMS). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Suite8 executes to compromise Oracle Hospitality Suite8. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Suite8, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Suite8 accessible data as well as unauthorized read access to a subset of Oracle Hospitality Suite8 accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Suite8. CVSS 3.0 Base Score 5.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10387","description":"Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10386","description":"Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Java Advanced Management Console. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java Advanced Management Console, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java Advanced Management Console accessible data as well as unauthorized read access to a subset of Java Advanced Management Console accessible data. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10385","description":"Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data as well as unauthorized read access to a subset of Oracle GlassFish Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GlassFish Server. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10383","description":"Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Interface). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Guest Access accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10382","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10381","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10380","description":"Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java Advanced Management Console. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java Advanced Management Console, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java Advanced Management Console accessible data as well as unauthorized read access to a subset of Java Advanced Management Console accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10375","description":"Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Guest Access accessible data as well as unauthorized read access to a subset of Oracle Hospitality Guest Access accessible data. CVSS 3.0 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10370","description":"Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Guest Access, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Guest Access accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality Guest Access accessible data. CVSS 3.0 Base Score 6.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10368","description":"Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition Status). Supported versions that are affected are 9.1.00 and 9.2.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise SCM eProcurement, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise SCM eProcurement accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise SCM eProcurement accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10367","description":"Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Engagement). Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data as well as unauthorized read access to a subset of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10361","description":"Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC DRS). The supported version that is affected is 8.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Shipboard Property Management System. While the vulnerability is in Oracle Hospitality Cruise Shipboard Property Management System, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Cruise Shipboard Property Management System accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Cruise Shipboard Property Management System. CVSS 3.0 Base Score 6.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10359","description":"Vulnerability in the Oracle Hyperion BI+ component of Oracle Hyperion (subcomponent: UI and Visualization). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion BI+. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion BI+ accessible data as well as unauthorized read access to a subset of Oracle Hyperion BI+ accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10358","description":"Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Workspace). The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. While the vulnerability is in Oracle Hyperion Financial Reporting, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Financial Reporting accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Reporting accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10357","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2017-10356","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-10355","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"Working exploit published","published":"2017-10-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-10351","description":"Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PT PeopleTools executes to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10350","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2017-10349","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2017-10348","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2017-10347","description":"Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2017-10344","description":"Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Simphony accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10343","description":"Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10342","description":"Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java Advanced Management Console. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java Advanced Management Console. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10340","description":"Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data as well as unauthorized read access to a subset of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10339","description":"Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10337","description":"Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Suite8 accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Suite8. CVSS 3.0 Base Score 5.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10336","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10334","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10331","description":"Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10327","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10324","description":"Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite (subcomponent: Oracle Forms). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Technology Stack. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Applications Technology Stack accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10322","description":"Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications Calendar. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Common Applications Calendar accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10319","description":"Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10318","description":"Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Suite8, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10317","description":"Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality Suite8 executes to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10316","description":"Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10315","description":"Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel UI Framework accessible data as well as unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10306","description":"Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM accessible data. CVSS 3.0 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10304","description":"Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HCM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10302","description":"Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel UI Framework accessible data as well as unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10300","description":"Vulnerability in the Siebel CRM Desktop component of Oracle Siebel CRM (subcomponent: Siebel Business Service Issues). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Desktop. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Desktop accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10299","description":"Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10295","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.0 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-10293","description":"Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2017-10287","description":"Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise FSCM accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10281","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-10280","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Test Framework). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10274","description":"Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2017-10264","description":"Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel UI Framework. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10197","description":"Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Folios). The supported version that is affected is 5.4.2.x through 5.5.1.x. Easily exploitable vulnerability allows physical access to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 4.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10164","description":"Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Office). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise FSCM accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10163","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web General). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. Note: Please refer to Doc ID \u003ca href=\"http://support.oracle.com/CSP/main/article?cmd=show\u0026type=NOT\u0026id=2310021.1\"\u003eMy Oracle Support Note 2310021.1 for instructions on how to address this issue. CVSS 3.0 Base Score 6.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10162","description":"Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Services). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core - Server Framework. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Core - Server Framework accessible data as well as unauthorized read access to a subset of Siebel Core - Server Framework accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10161","description":"Vulnerability in the Oracle Engineering Data Management component of Oracle Supply Chain Products Suite (subcomponent: Web Services Security). Supported versions that are affected are 6.1.3.0 and 6.2.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Engineering Data Management accessible data as well as unauthorized read access to a subset of Oracle Engineering Data Management accessible data. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10159","description":"Vulnerability in the Oracle Communications Policy Management component of Oracle Communications Applications (subcomponent: Portal, CMP). Supported versions that are affected are 11.5 and 12.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Policy Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Policy Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Policy Management accessible data as well as unauthorized read access to a subset of Oracle Communications Policy Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10158","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Core). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10154","description":"Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Access Manager accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10153","description":"Vulnerability in the Oracle Communications WebRTC Session Controller component of Oracle Communications Applications (subcomponent: Security (Gson)). Supported versions that are affected are 7.0, 7.1 and 7.2. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Communications WebRTC Session Controller. While the vulnerability is in Oracle Communications WebRTC Session Controller, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Communications WebRTC Session Controller. CVSS 3.0 Base Score 6.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10152","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10077","description":"Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: AD Utilities). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications DBA accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications DBA accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10066","description":"Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite (subcomponent: Oracle Forms). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Technology Stack. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Technology Stack accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10055","description":"Vulnerability in the Oracle iPlanet Web Server component of Oracle Fusion Middleware (subcomponent: Admin Graphical User Interface). The supported version that is affected is 7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iPlanet Web Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iPlanet Web Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iPlanet Web Server accessible data as well as unauthorized read access to a subset of Oracle iPlanet Web Server accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10054","description":"Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications (subcomponent: MMS). The supported version that is affected is 7.30.564.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality Cruise Materials Management executes to compromise Oracle Hospitality Cruise Materials Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Materials Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Materials Management accessible data. CVSS 3.0 Base Score 5.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10033","description":"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Support Tools). Supported versions that are affected are 11.1.1.8.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle WebCenter Sites executes to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data. Note: Please refer to Doc ID \u003ca href=\"http://support.oracle.com/CSP/main/article?cmd=show\u0026type=NOT\u0026id=2318213.1\"\u003eMy Oracle Support Note 2318213.1 for instructions on how to address this issue. CVSS 3.0 Base Score 4.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"Working exploit published","published":"2017-10-19","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2016-8748","description":"In Apache NiFi before 1.0.1 and 1.1.x before 1.1.1, there is a cross-site scripting vulnerability in connection details dialog when accessed by an authorized user. The user supplied text was not being properly handled when added to the DOM.","exploit_maturity":"No public exploit","published":"2017-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-6815","description":"In Apache Ranger before 0.6.2, users with \"keyadmin\" role should not be allowed to change password for users with \"admin\" role.","exploit_maturity":"No public exploit","published":"2017-10-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-10862","description":"jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token.","exploit_maturity":"No public exploit","published":"2017-10-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1503","description":"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 129578.","exploit_maturity":"No public exploit","published":"2017-10-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-12623","description":"An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity (XXE) attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the appropriate release.","exploit_maturity":"No public exploit","published":"2017-10-10","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-1000113","description":"The Deploy to container Plugin stored passwords unencrypted as part of its configuration. This allowed users with Jenkins master local file system access, or users with Extended Read access to the jobs it is used in, to retrieve those passwords. The Deploy to container Plugin now integrates with Credentials Plugin to store passwords securely, and automatically migrates existing passwords.","exploit_maturity":"No public exploit","published":"2017-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000110","description":"Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches containing a Jenkinsfile, and create corresponding pipelines in Jenkins. It did not properly check the current user's authentication and authorization when configuring existing GitHub organization folders. This allowed users with read access to the GitHub organization folder to reconfigure it, including changing the GitHub API endpoint for the organization folder to an attacker-controlled server to obtain the GitHub access token, if the organization folder was initially created using Blue Ocean.","exploit_maturity":"No public exploit","published":"2017-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000109","description":"The custom Details view of the Static Analysis Utilities based OWASP Dependency-Check Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view.","exploit_maturity":"No public exploit","published":"2017-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000105","description":"The optional Run/Artifacts permission can be enabled by setting a Java system property. Blue Ocean did not check this permission before providing access to archived artifacts, Item/Read permission was sufficient.","exploit_maturity":"No public exploit","published":"2017-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000104","description":"The Config File Provider Plugin is used to centrally manage configuration files that often include secrets, such as passwords. Users with only Overall/Read access to Jenkins were able to access URLs directly that allowed viewing these files. Access to view these files now requires sufficient permissions to configure the provided files, view the configuration of the folder in which the configuration files are defined, or have Job/Configure permissions to a job able to use these files.","exploit_maturity":"No public exploit","published":"2017-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000103","description":"The custom Details view of the Static Analysis Utilities based DRY Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view.","exploit_maturity":"No public exploit","published":"2017-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000102","description":"The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for example the console output which is parsed to extract build warnings (Warnings Plugin), could insert arbitrary HTML into this view.","exploit_maturity":"No public exploit","published":"2017-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000095","description":"The default whitelist included the following unsafe entries: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt(Object, String). These allowed circumventing many of the access restrictions implemented in the script sandbox by using e.g. currentBuild['rawBuild'] rather than currentBuild.rawBuild. Additionally, the following entries allowed accessing private data that would not be accessible otherwise due to script security: groovy.json.JsonOutput.toJson(Closure); groovy.json.JsonOutput.toJson(Object).","exploit_maturity":"No public exploit","published":"2017-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000094","description":"Docker Commons Plugin provides a list of applicable credential IDs to allow users configuring a job to select the one they'd like to use to authenticate with a Docker Registry. This functionality did not check permissions, allowing any user with Overall/Read permission to get a list of valid credentials IDs. Those could be used as part of an attack to capture the credentials using another vulnerability.","exploit_maturity":"No public exploit","published":"2017-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000091","description":"GitHub Branch Source Plugin connects to a user-specified GitHub API URL (e.g. GitHub Enterprise) as part of form validation and completion (e.g. to verify Scan Credentials are correct). This functionality improperly checked permissions, allowing any user with Overall/Read access to Jenkins to connect to any web server and send credentials with a known ID, thereby possibly capturing them. Additionally, this functionality did not require POST requests be used, thereby allowing the above to be performed without direct access to Jenkins via Cross-Site Request Forgery.","exploit_maturity":"No public exploit","published":"2017-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000089","description":"Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in Jenkins. The Pipeline: Build Step Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.","exploit_maturity":"No public exploit","published":"2017-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000088","description":"The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links.","exploit_maturity":"No public exploit","published":"2017-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000087","description":"GitHub Branch Source provides a list of applicable credential IDs to allow users configuring a job to select the one they'd like to use. This functionality did not check permissions, allowing any user with Overall/Read permission to get a list of valid credentials IDs. Those could be used as part of an attack to capture the credentials using another vulnerability.","exploit_maturity":"No public exploit","published":"2017-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000085","description":"Subversion Plugin connects to a user-specified Subversion repository as part of form validation (e.g. to retrieve a list of tags). This functionality improperly checked permissions, allowing any user with Item/Build permission (but not Item/Configure) to connect to any web server or Subversion server and send credentials with a known ID, thereby possibly capturing them. Additionally, this functionality did not require POST requests be used, thereby allowing the above to be performed without direct access to Jenkins via Cross-Site Request Forgery attacks.","exploit_maturity":"No public exploit","published":"2017-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1000084","description":"Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.","exploit_maturity":"No public exploit","published":"2017-10-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-9797","description":"When an Apache Geode cluster before v1.2.1 is operating in secure mode, an unauthenticated client can enter multi-user authentication mode and send metadata messages. These metadata operations could leak information about application data types. In addition, an attacker could perform a denial of service attack on the cluster.","exploit_maturity":"No public exploit","published":"2017-10-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-0043","description":"In Apache Wicket 1.5.10 or 6.13.0, by issuing requests to special urls handled by Wicket, it is possible to check for the existence of particular classes in the classpath and thus check whether a third party library with a known security vulnerability is in use.","exploit_maturity":"No public exploit","published":"2017-10-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-9794","description":"When a cluster is operating in secure mode, a user with read privileges for specific data regions can use the gfsh command line utility to execute queries. In Apache Geode before 1.2.1, the query results may contain data from another user's concurrently executing gfsh query, potentially revealing data that the user is not authorized to view.","exploit_maturity":"No public exploit","published":"2017-09-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-14735","description":"OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of \u0026colon; to construct a javascript: URL.","exploit_maturity":"No public exploit","published":"2017-09-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-6748","description":"Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.","exploit_maturity":"No public exploit","published":"2017-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5181","description":"The JBoss console in A-MQ allows remote attackers to execute arbitrary JavaScript.","exploit_maturity":"No public exploit","published":"2017-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5169","description":"Cross-site scripting (XSS) vulnerability in Apache Struts before 2.3.20.","exploit_maturity":"No public exploit","published":"2017-09-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-8738","description":"In Apache Struts 2.5 through 2.5.5, if an application allows entering a URL in a form field and the built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL.","exploit_maturity":"No public exploit","published":"2017-09-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-1849","description":"AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled.","exploit_maturity":"No public exploit","published":"2017-09-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-0110","description":"IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL.","exploit_maturity":"No public exploit","published":"2017-09-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3165","description":"In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site scripting where one authenticated user can cause scripts to run in the browser of another user authorized to access the first user's resources. This is due to improper escaping of server-side content. There is known to be a proof-of-concept exploit using this vulnerability.","exploit_maturity":"No public exploit","published":"2017-09-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-9635","description":"Jenkins before 1.586 does not set the HttpOnly flag in a Set-Cookie header for session cookies when run on Tomcat 7.0.41 or later, which makes it easier for remote attackers to obtain potentially sensitive information via script access to cookies.","exploit_maturity":"No public exploit","published":"2017-09-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-9634","description":"Jenkins before 1.586 does not set the secure flag on session cookies when run on Tomcat 7.0.41 or later, which makes it easier for remote attackers to capture cookies by intercepting their transmission within an HTTP session.","exploit_maturity":"No public exploit","published":"2017-09-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-14159","description":"slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a \"kill `cat /pathname`\" command, as demonstrated by openldap-initscript.","exploit_maturity":"No public exploit","published":"2017-09-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5001","description":"This is an information disclosure vulnerability in Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2 in the short-circuit reads feature of HDFS. A local user on an HDFS DataNode may be able to craft a block token that grants unauthorized read access to random files by guessing certain fields in the token.","exploit_maturity":"No public exploit","published":"2017-08-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-3155","description":"Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting.","exploit_maturity":"No public exploit","published":"2017-08-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-3153","description":"Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality.","exploit_maturity":"No public exploit","published":"2017-08-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-3152","description":"Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality.","exploit_maturity":"No public exploit","published":"2017-08-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-3151","description":"Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality.","exploit_maturity":"No public exploit","published":"2017-08-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-3150","description":"Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script.","exploit_maturity":"No public exploit","published":"2017-08-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-6311","description":"Get requests in JBoss Enterprise Application Platform (EAP) 7 disclose internal IP addresses to remote attackers.","exploit_maturity":"No public exploit","published":"2017-08-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-8446","description":"The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reporting_user role could execute a report with the permissions of another reporting user, possibly gaining access to sensitive data.","exploit_maturity":"No public exploit","published":"2017-08-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1501","description":"IBM WebSphere Application Server 8.0, 8.5, and 9.0 could provide weaker than expected security after using the Admin Console to update the web services security bindings settings. IBM X-Force ID: 129576.","exploit_maturity":"No public exploit","published":"2017-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-12882","description":"Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality.","exploit_maturity":"No public exploit","published":"2017-08-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-7674","description":"The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.","exploit_maturity":"No public exploit","published":"2017-08-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-6812","description":"The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses FormattedServiceListWriter to provide an HTML page which lists the names and absolute URL addresses of the available service endpoints. The module calculates the base URL using the current HttpServletRequest. The calculated base URL is used by FormattedServiceListWriter to build the service endpoint absolute URLs. If the unexpected matrix parameters have been injected into the request URL then these matrix parameters will find their way back to the client in the services list page which represents an XSS risk to the client.","exploit_maturity":"No public exploit","published":"2017-08-10","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-6794","description":"When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70, 6.0.0 to 6.0.45 the system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible.","exploit_maturity":"No public exploit","published":"2017-08-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-3562","description":"Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: AD Utilities). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications DBA accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications DBA accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10258","description":"Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Add New Image). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10257","description":"Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Browse Folder Hierarchy). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10256","description":"Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: EPPCM_HIER_TOP). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10255","description":"Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: EPPCM_HIER_TOP). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10253","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Pivot Grid). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10252","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10251","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Test Framework). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10250","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Tuxedo). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10249","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10248","description":"Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: EPPCM_HIER_TOP). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10247","description":"Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: HTML Area). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10244","description":"Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10243","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-10231","description":"Vulnerability in the Oracle Hospitality Cruise AffairWhere component of Oracle Hospitality Applications (subcomponent: AWExport). The supported version that is affected is 2.2.05.062. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Cruise AffairWhere executes to compromise Oracle Hospitality Cruise AffairWhere. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Cruise AffairWhere accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10230","description":"Vulnerability in the Oracle Hospitality Cruise Dining Room Management component of Oracle Hospitality Applications (subcomponent: SilverWhere). The supported version that is affected is 8.0.75. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Dining Room Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Dining Room Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Dining Room Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10229","description":"Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications (subcomponent: Event Viewer). The supported version that is affected is 7.30.562. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Materials Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Materials Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Materials Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10228","description":"Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: Module). The supported version that is affected is 8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Shipboard Property Management System. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Shipboard Property Management System accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Shipboard Property Management System accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10224","description":"Vulnerability in the Oracle Hospitality Inventory Management component of Oracle Hospitality Applications (subcomponent: Inventory and Count Cycle). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Inventory Management. While the vulnerability is in Oracle Hospitality Inventory Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Inventory Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Inventory Management accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10223","description":"Vulnerability in the Oracle Hospitality Materials Control component of Oracle Hospitality Applications (subcomponent: Purchasing). Supported versions that are affected are 8.31.4 and 8.32.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Materials Control. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Materials Control accessible data as well as unauthorized read access to a subset of Oracle Hospitality Materials Control accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10222","description":"Vulnerability in the Oracle Hospitality Materials Control component of Oracle Hospitality Applications (subcomponent: Production Tool). Supported versions that are affected are 8.31.4 and 8.32.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Materials Control. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Materials Control accessible data as well as unauthorized read access to a subset of Oracle Hospitality Materials Control accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10221","description":"Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications (subcomponent: OPS Operations). The supported version that is affected is 5.5. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality RES 3700 executes to compromise Oracle Hospitality RES 3700. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality RES 3700, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality RES 3700 accessible data as well as unauthorized read access to a subset of Oracle Hospitality RES 3700 accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality RES 3700. CVSS 3.0 Base Score 5.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10220","description":"Vulnerability in the Hospitality Property Interfaces component of Oracle Hospitality Applications (subcomponent: Parser). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Hospitality Property Interfaces executes to compromise Hospitality Property Interfaces. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Hospitality Property Interfaces accessible data. CVSS 3.0 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10219","description":"Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0.0 and 4.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Guest Access executes to compromise Oracle Hospitality Guest Access. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Guest Access accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10218","description":"Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0.0 and 4.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Guest Access accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10217","description":"Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0.0 and 4.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Guest Access accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10216","description":"Vulnerability in the Hospitality Property Interfaces component of Oracle Hospitality Applications (subcomponent: Parser). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality Property Interfaces. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hospitality Property Interfaces accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10215","description":"Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: EPPCM_DEFN_CATG). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10213","description":"Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Hospitality Suite8 executes to compromise Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Hospitality Suite8 accessible data. CVSS 3.0 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10212","description":"Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hospitality Suite8 accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10211","description":"Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hospitality Suite8. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Hospitality Suite8, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hospitality Suite8 accessible data as well as unauthorized read access to a subset of Hospitality Suite8 accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10208","description":"Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications (subcomponent: Other). The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via SMTP to compromise Oracle Hospitality e7. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality e7 accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10207","description":"Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Utilities). The supported version that is affected is 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Simphony. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10205","description":"Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). The supported version that is affected is 2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10201","description":"Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications (subcomponent: Other). The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality e7 executes to compromise Oracle Hospitality e7. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality e7 accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10200","description":"Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications (subcomponent: Other). The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality e7 executes to compromise Oracle Hospitality e7. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality e7 accessible data as well as unauthorized read access to a subset of Oracle Hospitality e7 accessible data. CVSS 3.0 Base Score 4.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10198","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2017-10195","description":"Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). The supported version that is affected is 2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10192","description":"Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Shopping Cart). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iStore accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10189","description":"Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Hospitality Suite8 executes to compromise Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hospitality Suite8 accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10188","description":"Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite 8/Android). The supported version that is affected is 1.01. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Hospitality Hotel Mobile executes to compromise Hospitality Hotel Mobile. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hospitality Hotel Mobile accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10186","description":"Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User and Company Profile). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iStore accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10184","description":"Vulnerability in the Oracle Field Service component of Oracle E-Business Suite (subcomponent: Wireless/WAP). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Field Service. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Field Service accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10183","description":"Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Point of Service. While the vulnerability is in Oracle Retail Xstore Point of Service, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Xstore Point of Service accessible data as well as unauthorized read access to a subset of Oracle Retail Xstore Point of Service accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Xstore Point of Service. CVSS 3.0 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10182","description":"Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Export Functionality). Supported versions that are affected are 5.4.0.x, 5.4.1.x and 5.4.3.x. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10181","description":"Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Forgot Password). Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle FLEXCUBE Direct Banking as well as unauthorized update, insert or delete access to some of Oracle FLEXCUBE Direct Banking accessible data and unauthorized read access to a subset of Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.0 Base Score 6.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10179","description":"Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite (subcomponent: User Monitoring). Supported versions that are affected are AMP 12.1.0.4.0 and AMP 13.1.1.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Application Management Pack for Oracle E-Business Suite. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Application Management Pack for Oracle E-Business Suite accessible data as well as unauthorized read access to a subset of Application Management Pack for Oracle E-Business Suite accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10178","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10175","description":"Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Profiles). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iSupport accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10173","description":"Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Website). Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Open Commerce Platform. While the vulnerability is in Oracle Retail Open Commerce Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Open Commerce Platform accessible data. CVSS 3.0 Base Score 5.8 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10172","description":"Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Framework). Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Open Commerce Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Retail Open Commerce Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Open Commerce Platform accessible data as well as unauthorized read access to a subset of Oracle Retail Open Commerce Platform accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10169","description":"Vulnerability in the Oracle Hospitality 9700 component of Oracle Hospitality Applications (subcomponent: Operation Security). The supported version that is affected is 4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality 9700 executes to compromise Oracle Hospitality 9700. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality 9700 accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10168","description":"Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite 8/Windows). The supported version that is affected is 1.1. Difficult to exploit vulnerability allows physical access to compromise Hospitality Hotel Mobile. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hospitality Hotel Mobile accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Hospitality Hotel Mobile. CVSS 3.0 Base Score 4.6 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10160","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10157","description":"Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of BI Publisher accessible data as well as unauthorized read access to a subset of BI Publisher accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10150","description":"Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Unifier accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10149","description":"Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Unifier, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Unifier accessible data as well as unauthorized read access to a subset of Primavera Unifier accessible data. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10148","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.8 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N). NOTE: the previous information is from the July 2017 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to inject special data into log files via a crafted T3 request.","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-10142","description":"Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Mobile Apps). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10135","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-10134","description":"Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: eProcurement). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise FSCM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FSCM accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise FSCM accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10133","description":"Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/RestAPI). The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality Hotel Mobile. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hospitality Hotel Mobile accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10132","description":"Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/iOS). The supported version that is affected is 1.05. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality Hotel Mobile. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hospitality Hotel Mobile accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10131","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10128","description":"Vulnerability in the Hospitality WebSuite8 Cloud Service component of Oracle Hospitality Applications (subcomponent: General). Supported versions that are affected are 8.9.6 and 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hospitality WebSuite8 Cloud Service. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Hospitality WebSuite8 Cloud Service, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hospitality WebSuite8 Cloud Service accessible data as well as unauthorized read access to a subset of Hospitality WebSuite8 Cloud Service accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10126","description":"Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: HTML Area). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10123","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). The supported version that is affected is 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10121","description":"Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java Advanced Management Console. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java Advanced Management Console, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java Advanced Management Console accessible data as well as unauthorized read access to a subset of Java Advanced Management Console accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10117","description":"Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java Advanced Management Console. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java Advanced Management Console accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10109","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2017-10108","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-10106","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10103","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10100","description":"Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: HTML Area). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10098","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10097","description":"Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10094","description":"Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10093","description":"Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10092","description":"Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10084","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Report Generator). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10083","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10082","description":"Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10081","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2017-10080","description":"Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10079","description":"Vulnerability in the Oracle Hospitality Suites Management component of Oracle Hospitality Applications (subcomponent: Core). The supported version that is affected is 3.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Suites Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Suites Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Suites Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Suites Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10076","description":"Vulnerability in the Oracle Hospitality Simphony First Edition Venue Management component of Oracle Hospitality Applications (subcomponent: Core). The supported version that is affected is 3.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony First Edition Venue Management. While the vulnerability is in Oracle Hospitality Simphony First Edition Venue Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony First Edition Venue Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Simphony First Edition Venue Management accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10073","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10072","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: All Modules). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10071","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: All Modules). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10070","description":"Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Maintenance Folders). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10069","description":"Vulnerability in the Oracle Payment Interface component of Oracle Hospitality Applications (subcomponent: Core). The supported version that is affected is 6.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payment Interface. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Payment Interface accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10064","description":"Vulnerability in the Hospitality WebSuite8 Cloud Service component of Oracle Hospitality Applications (subcomponent: General). Supported versions that are affected are 8.9.6 and 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hospitality WebSuite8 Cloud Service. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Hospitality WebSuite8 Cloud Service, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hospitality WebSuite8 Cloud Service accessible data as well as unauthorized read access to a subset of Hospitality WebSuite8 Cloud Service accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10063","description":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.0 Base Score 4.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10058","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web Administration). Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.0 Base Score 6.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10057","description":"Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Discussion Forum). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PRTL Interaction Hub accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10056","description":"Vulnerability in the Oracle Hospitality 9700 component of Oracle Hospitality Applications (subcomponent: Property Management Systems). The supported version that is affected is 4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality 9700 executes to compromise Oracle Hospitality 9700. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality 9700 accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10052","description":"Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: PCMServlet). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10049","description":"Vulnerability in the Siebel Core CRM component of Oracle Siebel CRM (subcomponent: Search). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Core CRM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel Core CRM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Core CRM accessible data as well as unauthorized read access to a subset of Siebel Core CRM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10047","description":"Vulnerability in the MICROS BellaVita component of Oracle Hospitality Applications (subcomponent: Interface). The supported version that is affected is 2.7.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS BellaVita. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MICROS BellaVita accessible data as well as unauthorized read access to a subset of MICROS BellaVita accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10046","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"Working exploit published","published":"2017-08-08","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2017-10045","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10044","description":"Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10039","description":"Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Web Client). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10038","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10032","description":"Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Access Control List). Supported versions that are affected are 6.3.4.1, 6.3.5.1, 6.3.6.1, 6.3.7.1, 6.4.0, 6.4.1 and 6.4.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Transportation Management accessible data as well as unauthorized read access to a subset of Oracle Transportation Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10027","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Homepage \u0026 Navigation). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10023","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Operations). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10022","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Operations). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10021","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10020","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10018","description":"Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FSCM accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10017","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Workcenter). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10015","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Designer). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10012","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Operations). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10011","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle FLEXCUBE Private Banking executes to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10010","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: FileUploads). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10009","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10008","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10007","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10006","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10005","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Private Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-10002","description":"Vulnerability in the Oracle Hospitality Inventory Management component of Oracle Hospitality Applications (subcomponent: Settings and Config). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Inventory Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Inventory Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Inventory Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-08-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-12649","description":"XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display.","exploit_maturity":"No public exploit","published":"2017-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-12648","description":"XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL.","exploit_maturity":"No public exploit","published":"2017-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-12647","description":"XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title.","exploit_maturity":"No public exploit","published":"2017-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-12646","description":"XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address.","exploit_maturity":"No public exploit","published":"2017-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-12645","description":"XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId.","exploit_maturity":"No public exploit","published":"2017-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-10404","description":"XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted redirect field to modules/apps/foundation/frontend-js/frontend-js-spa-web/src/main/resources/META-INF/resources/init.jsp.","exploit_maturity":"No public exploit","published":"2017-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-1504","description":"IBM WebSphere Application Server version 9.0.0.4 could provide weaker than expected security after using the PasswordUtil command to enable AES password encryption. IBM X-Force ID: 129579.","exploit_maturity":"No public exploit","published":"2017-08-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5394","description":"In the XSS Protection API module before 1.0.12 in Apache Sling, the encoding done by the XSSAPI.encodeForJSString() method is not restrictive enough and for some input patterns allows script tags to pass through unencoded, leading to potential XSS vulnerabilities.","exploit_maturity":"No public exploit","published":"2017-07-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-7685","description":"Apache OpenMeetings 1.0.0 responds to the following insecure HTTP methods: PUT, DELETE, HEAD, and PATCH.","exploit_maturity":"No public exploit","published":"2017-07-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-7663","description":"Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0.","exploit_maturity":"No public exploit","published":"2017-07-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-7672","description":"If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts version 2.5.12.","exploit_maturity":"No public exploit","published":"2017-07-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-7678","description":"In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script, would then be reflected back to the user and could be evaluated and executed by MS Windows-based clients. It is not an attack on Spark itself, but on the user, who may then execute the script inadvertently when viewing elements of the Spark web UIs.","exploit_maturity":"No public exploit","published":"2017-07-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-8032","description":"In Cloud Foundry cf-release versions prior to v264; UAA release all versions of UAA v2.x.x, 3.6.x versions prior to v3.6.13, 3.9.x versions prior to v3.9.15, 3.20.x versions prior to v3.20.0, and other versions prior to v4.4.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.17, 24.x versions prior to v24.12. 30.x versions prior to 30.5, and other versions prior to v41, zone administrators are allowed to escalate their privileges when mapping permissions for an external provider.","exploit_maturity":"No public exploit","published":"2017-07-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-7677","description":"In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.","exploit_maturity":"No public exploit","published":"2017-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-8751","description":"Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal users login and access policies.","exploit_maturity":"No public exploit","published":"2017-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-8746","description":"Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true.","exploit_maturity":"No public exploit","published":"2017-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-4974","description":"An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions prior to v3.6.9, 3.9.x versions prior to v3.9.11, and other versions prior to v3.16.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.13, 24.x versions prior to v24.8, and other versions prior to v30.1. An authorized user can use a blind SQL injection attack to query the contents of the UAA database, aka \"Blind SQL Injection with privileged UAA endpoints.\"","exploit_maturity":"No public exploit","published":"2017-06-13","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-4971","description":"An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default (i.e., set to 'false') can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data binding property mappings.","exploit_maturity":"No public exploit","published":"2017-06-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-7665","description":"In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.","exploit_maturity":"No public exploit","published":"2017-06-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-9736","description":"IBM WebSphere Application Server using malformed SOAP requests could allow a remote attacker to obtain sensitive information.","exploit_maturity":"No public exploit","published":"2017-06-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5004","description":"The Content-Encoding HTTP header feature in ws-xmlrpc 3.1.3 as used in Apache Archiva allows remote attackers to cause a denial of service (resource consumption) by decompressing a large file containing zeroes.","exploit_maturity":"No public exploit","published":"2017-06-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-0767","description":"PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the public schema to alter the public schema classpath.","exploit_maturity":"No public exploit","published":"2017-06-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-5646","description":"For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this activity is audit logged and can be easily associated with the authenticated user, this is still a serious security issue. All users are recommended to upgrade to the Apache Knox 0.12.0 release.","exploit_maturity":"No public exploit","published":"2017-05-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5241","description":"After logging into the portal, the logout jsp page redirects the browser back to the login page after. It is feasible for malicious users to redirect the browser to an unintended web page in Apache jUDDI 3.1.2, 3.1.3, 3.1.4, and 3.1.5 when utilizing the portlets based user interface also known as 'Pluto', 'jUDDI Portal', 'UDDI Portal' or 'uddi-console'. User session data, credentials, and auth tokens are cleared before the redirect.","exploit_maturity":"No public exploit","published":"2017-05-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-3161","description":"The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter.","exploit_maturity":"No public exploit","published":"2017-04-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-3597","description":"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3594","description":"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3592","description":"Vulnerability in the Oracle Payables component of Oracle E-Business Suite (subcomponent: Self Service Manager). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Payables. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Payables accessible data as well as unauthorized access to critical data or complete access to all Oracle Payables accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3579","description":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3577","description":"Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products (subcomponent: Frameworks). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise CS Campus Community accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3573","description":"Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Printing). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality OPERA 5 Property Services, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality OPERA 5 Property Services accessible data as well as unauthorized read access to a subset of Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3571","description":"Vulnerability in the PeopleSoft Enterprise SCM eBill Payment component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eBill Payment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise SCM eBill Payment accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise SCM eBill Payment accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3570","description":"Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: eSettlements). The supported version that is affected is 9.1. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise FSCM accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise FSCM accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3569","description":"Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Business Events). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality OPERA 5 Property Services accessible data as well as unauthorized read access to a subset of Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3568","description":"Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Printing and Login). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality OPERA 5 Property Services executes to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality OPERA 5 Property Services accessible data as well as unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality OPERA 5 Property Services. CVSS 3.0 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3560","description":"Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OXI Interface). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3556","description":"Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: File Management). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3552","description":"Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Room Image/Picture Setup). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3548","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L).","exploit_maturity":"Working exploit published","published":"2017-04-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-3546","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework). Supported versions that are affected are 8.54 and 8.55. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"Working exploit published","published":"2017-04-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-3537","description":"Vulnerability in the Oracle Real-Time Scheduler component of Oracle Utilities Applications (subcomponent: Mobile Communications Platform). Supported versions that are affected are 2.2.0.3.13, 2.3.0.0 and 2.3.0.1. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Real-Time Scheduler. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Real-Time Scheduler, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Real-Time Scheduler accessible data as well as unauthorized read access to a subset of Oracle Real-Time Scheduler accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3536","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security). Supported versions that are affected are 8.54 and 8.55. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3535","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3534","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3532","description":"Vulnerability in the Oracle Retail Warehouse Management System component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.2, 14.0 and 15.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Warehouse Management System. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Retail Warehouse Management System, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Warehouse Management System accessible data as well as unauthorized read access to a subset of Oracle Retail Warehouse Management System accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3530","description":"Vulnerability in the Oracle Transportation Manager component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.0, 6.4.1 and 6.4.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Transportation Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Transportation Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Transportation Manager accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3528","description":"Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datepicker, etc.)). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"Working exploit published","published":"2017-04-24","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2017-3527","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.54 and 8.55. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3526","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-3525","description":"Vulnerability in the PeopleSoft Enterprise SCM Service Procurement component of Oracle PeopleSoft Products (subcomponent: Usability). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Service Procurement. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise SCM Service Procurement accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise SCM Service Procurement accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3524","description":"Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing component of Oracle PeopleSoft Products (subcomponent: Bidder Registration). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Strategic Sourcing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise SCM Strategic Sourcing accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise SCM Strategic Sourcing accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3522","description":"Vulnerability in the PeopleSoft Enterprise SCM eSupplier Connection component of Oracle PeopleSoft Products (subcomponent: Vendor). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eSupplier Connection. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise SCM eSupplier Connection accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise SCM eSupplier Connection accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3521","description":"Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products (subcomponent: Supplier Registration). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Purchasing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise SCM Purchasing accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise SCM Purchasing accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3520","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.54 and 8.55. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3517","description":"Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime SEC). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3515","description":"Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: User Name/Password Management). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle User Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle User Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle User Management accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3509","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2017-3502","description":"Vulnerability in the PeopleSoft Enterprise FIN Receivables component of Oracle PeopleSoft Products (subcomponent: Receivables). The supported version that is affected is 9.2. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Receivables. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN Receivables accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3501","description":"Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9.14, 10.0, 10.1, 15.1 and 15.2. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Unifier, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Unifier accessible data as well as unauthorized read access to a subset of Primavera Unifier accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3496","description":"Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.0 and 12.1.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Enterprise Limits and Collateral Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3495","description":"Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Pre-Login). Supported versions that are affected are 12.0.2 and 12.0.3. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Direct Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3494","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Retail Teller). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3492","description":"Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.0 and 12.1.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3491","description":"Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and Collateral). Supported versions that are affected are 12.0.1 and 12.1.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3489","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Security Management System). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3488","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3485","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Universal Banking accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 6.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3484","description":"Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and Collateral). Supported versions that are affected are 12.0.0 and 12.1.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3483","description":"Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and Collateral). Supported versions that are affected are 12.0.0 and 12.1.0. Easily \"exploitable\" vulnerability allows high privileged attacker with logon to the infrastructure where Oracle FLEXCUBE Enterprise Limits and Collateral Management executes to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3482","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3481","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0 and 12.0.1. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3480","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0 and 12.0.1. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3479","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3478","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 12.0.0 and 12.1.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3477","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 12.0.0 and 12.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3475","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. While the vulnerability is in Oracle FLEXCUBE Private Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3473","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3471","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 12.0.0 and 12.1.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Private Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3470","description":"Vulnerability in the Oracle Communications Security Gateway component of Oracle Communications Applications (subcomponent: Network). The supported version that is affected is 3.0.0. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via ICMP Ping to compromise Oracle Communications Security Gateway. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Security Gateway. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3451","description":"Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Web). Supported versions that are affected are 4.0, 5.0, 5.1, 5.3, 6.0,6.1, 15.0 and 16.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Open Commerce Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Retail Open Commerce Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Open Commerce Platform accessible data as well as unauthorized read access to a subset of Oracle Retail Open Commerce Platform accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3288","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-1000360","description":"StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Controller launches exceptions in the console. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0.","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-5016","description":"Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (aka Pivotal Cloud Foundry) Elastic Runtime 1.6.x before 1.6.35, and PCF Elastic Runtime 1.7.x before 1.7.13 does not validate if a certificate is expired.","exploit_maturity":"No public exploit","published":"2017-04-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-6347","description":"Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2017-04-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-5653","description":"JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers.","exploit_maturity":"No public exploit","published":"2017-04-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-6348","description":"JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack.","exploit_maturity":"No public exploit","published":"2017-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-6805","description":"Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update-notifier documents.","exploit_maturity":"No public exploit","published":"2017-04-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-4976","description":"Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users to obtain sensitive information via a process listing.","exploit_maturity":"No public exploit","published":"2017-03-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-5644","description":"Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion (XEE) attack.","exploit_maturity":"No public exploit","published":"2017-03-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-0229","description":"Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool, and (3) shutdownDatanode HDFS admin commands, which allows remote authenticated users to cause a denial of service (DataNodes shutdown) or perform unnecessary operations by issuing a command.","exploit_maturity":"No public exploit","published":"2017-03-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-4316","description":"Multiple cross-site scripting (XSS) vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) setName parameter to identity-mgt/challenges-mgt.jsp; the (2) webappType or (3) httpPort parameter to webapp-list/webapp_info.jsp; the (4) dsName or (5) description parameter to ndatasource/newdatasource.jsp; the (6) phase parameter to viewflows/handlers.jsp; or the (7) url parameter to ndatasource/validateconnection-ajaxprocessor.jsp.","exploit_maturity":"Working exploit published","published":"2017-02-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2016-4314","description":"Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the logFile parameter to downloadgz-ajaxprocessor.jsp.","exploit_maturity":"Working exploit published","published":"2017-02-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-3902","description":"Cross-site scripting (XSS) vulnerability in the Web user interface (UI) in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation.","exploit_maturity":"No public exploit","published":"2017-02-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-4988","description":"Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.","exploit_maturity":"No public exploit","published":"2017-02-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-4987","description":"Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories and read arbitrary files via unspecified form fields.","exploit_maturity":"No public exploit","published":"2017-02-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-3101","description":"Cross-site scripting (XSS) vulnerability in the Extra Columns plugin before 1.17 in Jenkins allows remote attackers to inject arbitrary web script or HTML by leveraging failure to filter tool tips through the configured markup formatter.","exploit_maturity":"No public exploit","published":"2017-02-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-6285","description":"Cross-site scripting (XSS) vulnerability in includes/decorators/global-translations.jsp in Atlassian JIRA before 7.2.2 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header.","exploit_maturity":"No public exploit","published":"2017-01-31","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-2402","description":"OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-middle attackers to bypass certificate pinning by sending a certificate chain with a certificate from a non-pinned trusted CA and the pinned certificate.","exploit_maturity":"Proof of concept only","published":"2017-01-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2017-3315","description":"Vulnerability in the PeopleSoft Enterprise HCM ePerformance component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM ePerformance. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise HCM ePerformance accessible data. CVSS v3.0 Base Score 4.3 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3314","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.0, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3311","description":"Vulnerability in the Application Testing Suite component of Oracle Enterprise Manager Grid Control (subcomponent: Test Manager for Web Apps). Supported versions that are affected are 12.5.0.3, 12.5.0.2 and 12.4.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Application Testing Suite. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Application Testing Suite accessible data. CVSS v3.0 Base Score 5.3 (Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3300","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Multichannel Framework). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3299","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3298","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3297","description":"Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Framework). Supported versions that are affected are 12.0.2 and 12.0.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Direct Banking accessible data. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3296","description":"Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework). Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Commerce Platform accessible data. CVSS v3.0 Base Score 4.3 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3292","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS v3.0 Base Score 5.7 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3286","description":"Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: Patching). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Applications DBA executes to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications DBA accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications DBA accessible data. CVSS v3.0 Base Score 6.0 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3283","description":"Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3282","description":"Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3281","description":"Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3280","description":"Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3277","description":"Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: OAM Client). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data. CVSS v3.0 Base Score 4.9 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3262","description":"Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to Java Mission Control Installation. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2017-3261","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 4.3 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2017-3255","description":"Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: ADF Faces). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper. While the vulnerability is in Oracle JDeveloper, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle JDeveloper accessible data. CVSS v3.0 Base Score 5.8 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3252","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.8 (Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2017-3247","description":"Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle GlassFish Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data. CVSS v3.0 Base Score 4.3 (Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3246","description":"Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Patching). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Application Object Library executes to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Application Object Library accessible data as well as unauthorized access to critical data or complete access to all Oracle Application Object Library accessible data. CVSS v3.0 Base Score 6.0 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3245","description":"Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Pre-Login). Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Direct Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Direct Banking accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3236","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2017-3231","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 4.3 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2016-8329","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Mobile Application Platform). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8324","description":"Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Core Banking accessible data. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8323","description":"Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Core Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Core Banking accessible data. CVSS v3.0 Base Score 5.4 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8322","description":"Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Core Banking accessible data. CVSS v3.0 Base Score 4.3 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8320","description":"Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.0 and 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Enterprise Limits and Collateral Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8319","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Investor Servicing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8317","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Investor Servicing accessible data. CVSS v3.0 Base Score 5.3 (Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8316","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Investor Servicing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS v3.0 Base Score 5.4 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8313","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Private Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS v3.0 Base Score 4.1 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8311","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 6.5 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8309","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS v3.0 Base Score 4.3 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8308","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data. CVSS v3.0 Base Score 4.3 (Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8307","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8306","description":"Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS v3.0 Base Score 5.4 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8304","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 5.4 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8303","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8302","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 4.3 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8301","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 4.3 (Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8300","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Private Banking accessible data. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8299","description":"Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Universal Banking. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8282","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Private Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5623","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS v3.0 Base Score 5.4 (Confidentiality and Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5614","description":"Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS v3.0 Base Score 4.3 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5552","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Integrity impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-5549","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 6.5 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2016-5548","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 6.5 (Confidentiality impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2016-5547","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Availability impacts).","exploit_maturity":"No public exploit","published":"2017-01-27","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-4055","description":"The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a \"regular expression Denial of Service (ReDoS).\"","exploit_maturity":"No public exploit","published":"2017-01-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5725","description":"Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\\ (dot dot backslash) in a response to a recursive GET command.","exploit_maturity":"Working exploit published","published":"2017-01-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-10027","description":"Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client authentication by stripping the \"starttls\" feature from a server response.","exploit_maturity":"No public exploit","published":"2017-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-10006","description":"In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impact is XSS.","exploit_maturity":"No public exploit","published":"2016-12-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-3271","description":"Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header.","exploit_maturity":"No public exploit","published":"2016-12-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-8295","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8294","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8292","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Talent Acquisition Manager.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-8285","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote administrators to affect confidentiality and integrity via vectors related to Candidate Gateway.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5622","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote attackers to affect confidentiality and integrity via vectors related to INFRA.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5621","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 and 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality via vectors related to INFRA, a different vulnerability than CVE-2016-5603.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5620","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to INFRA, a different vulnerability than CVE-2016-5619.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5604","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-3563.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5603","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality via vectors related to INFRA, a different vulnerability than CVE-2016-5621.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5602","description":"Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality via vectors related to Code Generation Engine.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5601","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows local users to affect confidentiality and integrity via vectors related to CIE Related Components.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5600","description":"Unspecified vulnerability in the PeopleSoft Enterprise SCM Services Procurement component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5597","description":"Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality via vectors related to Networking.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2016-5596","description":"Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5594","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to INFRA.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5585","description":"Unspecified vulnerability in the Oracle Interaction Center Intelligence component in Oracle E-Business Suite 12.1.1 through 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5583","description":"Unspecified vulnerability in the Oracle One-to-One Fulfillment component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5581","description":"Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows local users to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5575","description":"Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Resources Module.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5571","description":"Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.1.3 and 12.2.3 through 12.2.6 allows remote administrators to affect confidentiality and integrity via vectors related to AD Utilities, a different vulnerability than CVE-2016-5567.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5570","description":"Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 through 12.2.6 allows remote administrators to affect confidentiality and integrity via vectors related to AD Utilities.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5569","description":"Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5567","description":"Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.1.3 and 12.2.3 through 12.2.6 allows remote administrators to affect confidentiality and integrity via vectors related to AD Utilities, a different vulnerability than CVE-2016-5571.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5560","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to OpenUI.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5554","description":"Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to JMX.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2016-5543","description":"Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote attackers to affect confidentiality and integrity via vectors related to INFRA.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5540","description":"Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5537","description":"Unspecified vulnerability in the NetBeans component in Oracle Fusion Middleware 8.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the October 2016 CPU. Oracle has not commented on third-party claims that this issue is a directory traversal vulnerability which allows local users with certain permissions to write to arbitrary files and consequently gain privileges via a .. (dot dot) in a archive entry in a ZIP file imported as a project.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-5534","description":"Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5533","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.4, 15.x, and 16.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5532","description":"Unspecified vulnerability in the Oracle Shipping Execution component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Workflow Events.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5530","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5529 and CVE-2016-8293.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5529","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5530 and CVE-2016-8293.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5527","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5524.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5524","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5527.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5522","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5521","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5512.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5517","description":"Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.1.3 allows local users to affect confidentiality via vectors related to AD Utilities.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5513","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Manager.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5512","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5521.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5511","description":"Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 12.2.1.0.0, 12.2.1.1.0, and 12.2.1.2.0 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5510","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5504","description":"Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.1.0.4, 6.1.1.6, and 6.2.0.0 allows local users to affect confidentiality via vectors related to Supplier Portal.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5502","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to INFRA.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5493","description":"Unspecified vulnerability in the Oracle FLEXCUBE Private Banking component in Oracle Financial Services Applications 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5488","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-3445.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5479","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 allows remote authenticated users to affect confidentiality via vectors related to INFRA.","exploit_maturity":"No public exploit","published":"2016-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0377","description":"The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, and 8.5.x before 8.5.5.10 mishandles CSRFtoken cookies, which allows remote authenticated users to obtain sensitive information via unspecified vectors.","exploit_maturity":"No public exploit","published":"2016-10-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-6652","description":"SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call.","exploit_maturity":"No public exploit","published":"2016-10-05","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-7046","description":"Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL.","exploit_maturity":"No public exploit","published":"2016-10-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-5398","description":"Cross-site scripting (XSS) vulnerability in Business Process Editor in Red Hat JBoss BPM Suite before 6.3.3 allows remote authenticated users to inject arbitrary web script or HTML by levering permission to create business processes.","exploit_maturity":"No public exploit","published":"2016-10-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-3042","description":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Application Server (WAS) Liberty before 16.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving OpenID Connect clients.","exploit_maturity":"No public exploit","published":"2016-10-01","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5395","description":"Cross-site scripting (XSS) vulnerability in the create user functionality in the policy admin tool in Apache Ranger before 0.6.1 allows remote authenticated administrators to inject arbitrary web script or HTML via vectors related to policies.","exploit_maturity":"No public exploit","published":"2016-09-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-4993","description":"CRLF injection vulnerability in the Undertow web server in WildFly 10.0.0, as used in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.","exploit_maturity":"No public exploit","published":"2016-09-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-7033","description":"Multiple cross-site scripting (XSS) vulnerabilities in the admin pages in dashbuilder in Red Hat JBoss BPM Suite 6.3.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2016-09-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-6345","description":"RESTEasy allows remote authenticated users to obtain sensitive information by leveraging \"insufficient use of random values\" in async jobs.","exploit_maturity":"No public exploit","published":"2016-09-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-6344","description":"Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies.","exploit_maturity":"No public exploit","published":"2016-09-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-3089","description":"Cross-site scripting (XSS) vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter.","exploit_maturity":"No public exploit","published":"2016-08-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-5000","description":"The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.","exploit_maturity":"No public exploit","published":"2016-08-05","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0782","description":"The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.2 allows remote authenticated users to conduct cross-site scripting (XSS) attacks and consequently obtain sensitive information from a Java memory dump via vectors related to creating a queue.","exploit_maturity":"No public exploit","published":"2016-08-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-5005","description":"Cross-site scripting (XSS) vulnerability in Apache Archiva 1.3.9 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via the connector.sourceRepoId parameter to admin/addProxyConnector_commit.action.","exploit_maturity":"No public exploit","published":"2016-07-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-5477","description":"Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5470","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality via vectors related to Application Designer.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5468","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality and integrity via vectors related to EAI, a different vulnerability than CVE-2016-5451.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5467","description":"Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to eProcurement.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5464","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect integrity via vectors related to SWSE Server, a different vulnerability than CVE-2016-5463.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5463","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect integrity via vectors related to SWSE Server, a different vulnerability than CVE-2016-5464.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5461","description":"Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Object Manager.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5459","description":"Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect integrity via vectors related to iHelp.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5458","description":"Unspecified vulnerability in the Oracle Communications EAGLE Application Processor component in Oracle Communications Applications 16.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to APPL.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5456","description":"Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Services.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5455","description":"Unspecified vulnerability in the Oracle Communications Messaging Server component in Oracle Communications Applications 6.3, 7.0, and 8.0 allows remote attackers to affect confidentiality via vectors related to Multiplexor.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-5450","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect integrity via vectors related to UIF Open UI.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3611","description":"Unspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail Applications 15.0 allows remote attackers to affect confidentiality and integrity via vectors related to System Administration.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3608","description":"Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3589","description":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Applications 12.0.1, 12.0.2, and 12.0.3 allows remote attackers to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3573","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3570, and CVE-2016-3571.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3572","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Access.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3571","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3570, and CVE-2016-3573.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3570","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3571, and CVE-2016-3573.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3569","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3570, CVE-2016-3571, and CVE-2016-3573.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3568","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3569, CVE-2016-3570, CVE-2016-3571, and CVE-2016-3573.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3567","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web access.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3566","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3568, CVE-2016-3569, CVE-2016-3570, CVE-2016-3571, and CVE-2016-3573.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3563","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-5604.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3560","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors related to SDK, a different vulnerability than CVE-2016-3526 and CVE-2016-3529.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3559","description":"Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Email Center Agent Console, a different vulnerability than CVE-2016-3558.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3558","description":"Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Email Center Agent Console, a different vulnerability than CVE-2016-3559.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3557","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to File Load.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3555","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PGC / Excel Plugin.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3553","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality and integrity via vectors related to PC Core.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3550","description":"Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2016-3549","description":"Unspecified vulnerability in the Oracle E-Business Suite Secure Enterprise Search component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Search Integration Engine.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3548","description":"Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Marketing activity collateral.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3547","description":"Unspecified vulnerability in the Oracle One-to-One Fulfillment component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Content Manager.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3545","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web based help screens.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3542","description":"Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote administrators to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"Working exploit published","published":"2016-07-21","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2016-3540","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 and 13.1.0.0 allows remote attackers to affect confidentiality via vectors related to UI Framework.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3537","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-5473.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3534","description":"Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Engineering Change Order. NOTE: the previous information is from the July 2016 CPU. Oracle has not commented on third-party claims that this issue involves an open redirect vulnerability, which allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3533","description":"Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Search. NOTE: the previous information is from the July 2016 CPU. Oracle has not commented on third-party claims that this issue involves multiple open redirect vulnerabilities, which allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3529","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors related to SDK, a different vulnerability than CVE-2016-3526 and CVE-2016-3560.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3525","description":"Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality via vectors related to Cookie Management.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3524","description":"Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Configuration.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3523","description":"Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Application Service.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3520","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote administrators to affect confidentiality via vectors related to AOL Diagnostic tests.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3519","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PC / Get Shortcut.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3517","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related to PC / Get Shortcut.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3514","description":"Unspecified vulnerability in the Oracle Enterprise Communications Broker component in Oracle Communications Applications before PCz 2.0.0m4p1 allows remote authenticated users to affect confidentiality via vectors related to GUI, a different vulnerability than CVE-2016-3516.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3513","description":"Unspecified vulnerability in the Oracle Communications Operations Monitor component in Oracle Communications Applications before 3.3.92.0.0 allows remote authenticated users to affect confidentiality via vectors related to Infrastructure.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3509","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality and integrity via vectors related to File Folders / URL Attachment.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3507","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related to WebClient / Admin.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3502","description":"Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8 and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3496","description":"Unspecified vulnerability in the Enterprise Manager for Fusion Middleware component in Oracle Enterprise Manager Grid Control 11.1.1.7, and 11.1.1.9 allows remote attackers to affect confidentiality via vectors related to SOA Topology Viewer.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3494","description":"Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2 allows remote attackers to affect availability via vectors related to OS Provisioning.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3478","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to File Processing.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3476","description":"Unspecified vulnerability in the Oracle Knowledge component in Oracle Siebel CRM 8.5.x allows remote attackers to affect confidentiality and integrity via vectors related to Information Manager Console.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3475","description":"Unspecified vulnerability in the Oracle Knowledge component in Oracle Siebel CRM 8.5.x allows remote authenticated users to affect confidentiality via vectors related to Information Manager Console.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3472","description":"Unspecified vulnerability in the Siebel Engineering - Installer and Deployment component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Web Server.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3458","description":"Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91 allows remote attackers to affect integrity via vectors related to CORBA.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2016-3445","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-5488.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3433","description":"Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web Administration.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3432","description":"Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Server.","exploit_maturity":"No public exploit","published":"2016-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-3192","description":"Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file.","exploit_maturity":"No public exploit","published":"2016-07-12","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0389","description":"Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to obtain sensitive information via unspecified vectors.","exploit_maturity":"No public exploit","published":"2016-07-07","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-4465","description":"The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of service via a null value for a URL field.","exploit_maturity":"No public exploit","published":"2016-07-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-3670","description":"Cross-site scripting (XSS) vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field.","exploit_maturity":"Working exploit published","published":"2016-06-13","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2016-3093","description":"Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via unspecified vectors.","exploit_maturity":"No public exploit","published":"2016-06-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-3094","description":"PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service (broker termination) via a crafted authentication attempt, which triggers an uncaught exception.","exploit_maturity":"No public exploit","published":"2016-06-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-3727","description":"The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors.","exploit_maturity":"No public exploit","published":"2016-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-3725","description":"Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service (service disruption).","exploit_maturity":"No public exploit","published":"2016-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-3724","description":"Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration.","exploit_maturity":"No public exploit","published":"2016-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-3723","description":"Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing permissions checks in unspecified XML/JSON API endpoints.","exploit_maturity":"No public exploit","published":"2016-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-3722","description":"Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with multiple accounts to cause a denial of service (unable to login) by editing the \"full name.\"","exploit_maturity":"No public exploit","published":"2016-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-3721","description":"Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables.","exploit_maturity":"No public exploit","published":"2016-05-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-0306","description":"IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.41, 8.0 before 8.0.0.13, and 8.5 before 8.5.5.10, when FIPS 140-2 is enabled, misconfigures TLS, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.","exploit_maturity":"No public exploit","published":"2016-05-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3464","description":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to Accounts.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3463","description":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3460","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to ePerformance.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3457","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM ePerformance component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3447","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to OAF Core.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3442","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Portal.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3435","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect availability via vectors related to PIA Core Technology.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3434","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Logout.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3431","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than CVE-2016-3420.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3429","description":"Unspecified vulnerability in the Oracle Retail Xstore Point of Service component in Oracle Retail Applications 5.0, 5.5, 6.0, 6.5, 7.0, and 7.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Xstore Services.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3425","description":"Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-3423","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than CVE-2016-0698.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3422","description":"Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect availability via vectors related to 2D.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2016-3420","description":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than CVE-2016-3431.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3417","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to PIA Search Functionality.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-3416","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality and integrity via vectors related to Console.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0700","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0675.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0698","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than CVE-2016-3423.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0697","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows local users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0696","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6 allows remote attackers to affect confidentiality and integrity via vectors related to Console.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0695","description":"Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2016-0685","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to File Processing.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0684","description":"Unspecified vulnerability in the Oracle Retail MICROS ARS POS component in Oracle Retail Applications 1.5 allows remote authenticated users to affect confidentiality via vectors related to POS.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0683","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Search Framework.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0680","description":"Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Services Procurement.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0675","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0700.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0674","description":"Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality and integrity via vectors related to Email.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0673","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to UIF Open UI.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0672","description":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0479","description":"Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality and integrity via vectors related to Analytics Scorecard.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0469","description":"Unspecified vulnerability in the Oracle Retail MICROS C2 component in Oracle Retail Applications 9.89.0.0 allows local users to affect confidentiality via vectors related to POS.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0468","description":"Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0408","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 through 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to the Activity Guide sub-component.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0407","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration.","exploit_maturity":"No public exploit","published":"2016-04-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-1776","description":"Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk when the Intermediate data encryption feature is enabled, which allows local users to obtain sensitive information by reading the file.","exploit_maturity":"No public exploit","published":"2016-04-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-4003","description":"Cross-site scripting (XSS) vulnerability in the URLDecoder function in JRE before 1.8, as used in Apache Struts 2.x before 2.3.28, when using a single byte page encoding, allows remote attackers to inject arbitrary web script or HTML via multi-byte characters in a url-encoded parameter.","exploit_maturity":"No public exploit","published":"2016-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-2166","description":"The (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.","exploit_maturity":"No public exploit","published":"2016-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-2162","description":"Apache Struts 2.x before 2.3.25 does not sanitize text in the Locale object constructed by I18NInterceptor, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors involving language display.","exploit_maturity":"No public exploit","published":"2016-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5167","description":"The Policy Admin Tool in Apache Ranger before 0.5.1 allows remote authenticated users to bypass intended access restrictions via the REST API.","exploit_maturity":"No public exploit","published":"2016-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-2163","description":"Cross-site scripting (XSS) vulnerability in Apache OpenMeetings before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the event description when creating an event.","exploit_maturity":"No public exploit","published":"2016-04-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-0784","description":"Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a .. (dot dot) in a ZIP archive entry.","exploit_maturity":"Working exploit published","published":"2016-04-11","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0712","description":"Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to portal.","exploit_maturity":"No public exploit","published":"2016-04-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-0711","description":"Multiple cross-site scripting (XSS) vulnerabilities in Apache Jetspeed before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the title parameter when adding a (1) link, (2) page, or (3) folder resource.","exploit_maturity":"No public exploit","published":"2016-04-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-0265","description":"Cross-site scripting (XSS) vulnerability in the Policy Admin Tool in Apache Ranger before 0.5.0 allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header.","exploit_maturity":"No public exploit","published":"2016-04-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-0790","description":"Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach.","exploit_maturity":"No public exploit","published":"2016-04-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-0789","description":"CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.","exploit_maturity":"No public exploit","published":"2016-04-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-0734","description":"The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.","exploit_maturity":"No public exploit","published":"2016-04-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-0283","description":"Cross-site scripting (XSS) vulnerability in the OpenID Connect (OIDC) client web application in IBM WebSphere Application Server (WAS) Liberty Profile 8.5.5 before 8.5.5.9 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.","exploit_maturity":"No public exploit","published":"2016-03-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0763","description":"The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context.","exploit_maturity":"No public exploit","published":"2016-02-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2016-0706","description":"Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote authenticated users to bypass intended SecurityManager restrictions and read arbitrary HTTP requests, and consequently discover session ID values, via a crafted web application.","exploit_maturity":"No public exploit","published":"2016-02-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5345","description":"The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the existence of a directory via a URL that lacks a trailing / (slash) character.","exploit_maturity":"No public exploit","published":"2016-02-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-5174","description":"Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. (slash dot dot) in a pathname used by a web application in a getResource, getResourceAsStream, or getResourcePaths call, as demonstrated by the $CATALINA_BASE/webapps directory.","exploit_maturity":"No public exploit","published":"2016-02-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-8797","description":"Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter to a plugins/cache URI.","exploit_maturity":"No public exploit","published":"2016-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-8796","description":"Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted schema-browse URL.","exploit_maturity":"No public exploit","published":"2016-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-8795","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web script or HTML via crafted fields that are mishandled during the rendering of the (1) Analysis page, related to webapp/web/js/scripts/analysis.js or (2) Schema-Browser page, related to webapp/web/js/scripts/schema-browser.js.","exploit_maturity":"No public exploit","published":"2016-02-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-7536","description":"Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts.","exploit_maturity":"No public exploit","published":"2016-02-03","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-7417","description":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server 7.0 before 7.0.0.41, 8.0 before 8.0.0.12, and 8.5 before 8.5.5.9 allows remote authenticated users to inject arbitrary web script or HTML via crafted data from an OAuth provider.","exploit_maturity":"No public exploit","published":"2016-01-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0614","description":"Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0591","description":"Unspecified vulnerability in the PeopleSoft Enterprise SCM Purchasing component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Supplier Change.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0590","description":"Unspecified vulnerability in the PeopleSoft Enterprise SCM Order Management component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0589","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0588","description":"Unspecified vulnerability in the Oracle General Ledger component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Consolidation Hierarchy Viewer.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0587","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality via unknown vectors related to File Processing.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0586","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to iHelp.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0585","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect availability via vectors related to ICX Error.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0584","description":"Unspecified vulnerability in the Oracle CRM Technology Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to BIS Common Components, a different vulnerability than CVE-2016-0579, CVE-2016-0582, and CVE-2016-0583.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0583","description":"Unspecified vulnerability in the Oracle CRM Technology Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to BIS Common Components, a different vulnerability than CVE-2016-0579, CVE-2016-0582, and CVE-2016-0584.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0582","description":"Unspecified vulnerability in the Oracle CRM Technology Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to BIS Common Components, a different vulnerability than CVE-2016-0579, CVE-2016-0583, and CVE-2016-0584.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0581","description":"Unspecified vulnerability in the Oracle Approvals Management component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via vectors related to AME Page rendering.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0580","description":"Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0579","description":"Unspecified vulnerability in the Oracle CRM Technology Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to BIS Common Components, a different vulnerability than CVE-2016-0582, CVE-2016-0583, and CVE-2016-0584.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0578","description":"Unspecified vulnerability in the Oracle CRM Technology Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via vectors related to BIS Common Components.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0576","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via vectors related to ICX LOVs.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0575","description":"Unspecified vulnerability in the Oracle Learning Management component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to OTA Self Service.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0571","description":"Unspecified vulnerability in the Oracle Balanced Scorecard component in Oracle E-Business Suite 11.5.10.2 and 12.1 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0570","description":"Unspecified vulnerability in the Oracle HCM Configuration Workbench component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0569","description":"Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0568","description":"Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Server Components.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0567","description":"Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Embedded Data Warehouse.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0566","description":"Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via unknown vectors related to Deliverables.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0565","description":"Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0564","description":"Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-0561.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0563","description":"Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2 and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Common Techstack.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0562","description":"Unspecified vulnerability in the Oracle Common Applications component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via vectors related to CRM User Management Framework.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0561","description":"Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-0564.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0560","description":"Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-0545, CVE-2016-0551, CVE-2016-0552, and CVE-2016-0559.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0559","description":"Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-0545, CVE-2016-0551, CVE-2016-0552, and CVE-2016-0560.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0558","description":"Unspecified vulnerability in the Oracle Service Contracts component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Renewals.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0557","description":"Unspecified vulnerability in the Oracle Advanced Collections component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Administration, a different vulnerability than CVE-2016-0556.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0556","description":"Unspecified vulnerability in the Oracle Advanced Collections component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Administration, a different vulnerability than CVE-2016-0557.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0555","description":"Unspecified vulnerability in the Oracle CADView-3D component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Studio.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0554","description":"Unspecified vulnerability in the Oracle Interaction Center Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Business Intelligence.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0553","description":"Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0552","description":"Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-0545, CVE-2016-0551, CVE-2016-0559, and CVE-2016-0560.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0551","description":"Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-0545, CVE-2016-0552, CVE-2016-0559, and CVE-2016-0560.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0550","description":"Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to CRM HTML Administration.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0549","description":"Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Common Components, a different vulnerability than CVE-2016-0511, CVE-2016-0547, and CVE-2016-0548.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0548","description":"Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Common Components, a different vulnerability than CVE-2016-0511, CVE-2016-0547, and CVE-2016-0549.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0547","description":"Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Common Components, a different vulnerability than CVE-2016-0511, CVE-2016-0548, and CVE-2016-0549.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0545","description":"Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-0551, CVE-2016-0552, CVE-2016-0559, and CVE-2016-0560.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0544","description":"Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Architecture.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0543","description":"Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Preview.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0542","description":"Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via unknown vectors related to Field Service Map.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0541","description":"Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect confidentiality via unknown vectors related to UI Servlet, a different vulnerability than CVE-2016-0540.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0540","description":"Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect confidentiality via unknown vectors related to UI Servlet, a different vulnerability than CVE-2016-0541.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0539","description":"Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0538","description":"Unspecified vulnerability in the Oracle Financial Consolidation Hub component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Business Intelligence.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0537","description":"Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Person.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0536","description":"Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to error messages.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0534","description":"Unspecified vulnerability in the Oracle Project Contracts component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Printing.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0533","description":"Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Messaging.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0532","description":"Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security Assignments.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0531","description":"Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Oracle Diagnostics Interfaces.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0530","description":"Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to User GUI, a different vulnerability than CVE-2016-0527, CVE-2016-0528, and CVE-2016-0529.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0529","description":"Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to User GUI, a different vulnerability than CVE-2016-0527, CVE-2016-0528, and CVE-2016-0530.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0528","description":"Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to User GUI, a different vulnerability than CVE-2016-0527, CVE-2016-0529, and CVE-2016-0530.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0527","description":"Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to User GUI, a different vulnerability than CVE-2016-0528, CVE-2016-0529, and CVE-2016-0530.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0526","description":"Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via unknown vectors related to Wireless Framework.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0525","description":"Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Work Provider Administration.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0524","description":"Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Work Provider Administration.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0523","description":"Unspecified vulnerability in the Oracle Interaction Blending component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Blending Administration.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0521","description":"Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Redirection.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0520","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to Java APIs.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0519","description":"Unspecified vulnerability in the Oracle iReceivables component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to AR Web Utilities, a different vulnerability than CVE-2016-0507.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0518","description":"Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to General utilities, a different vulnerability than CVE-2016-0517.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0517","description":"Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to General utilities, a different vulnerability than CVE-2016-0518.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0516","description":"Unspecified vulnerability in the Oracle Quality component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to QA / Order Management Integration.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0515","description":"Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via vectors related to BIS Common Components, a different vulnerability than CVE-2016-0514.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0514","description":"Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via vectors related to BIS Common Components, a different vulnerability than CVE-2016-0515.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0513","description":"Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to BIS Common Components.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0512","description":"Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Self Service - Common Modules.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0511","description":"Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Common Components, a different vulnerability than CVE-2016-0547, CVE-2016-0548, and CVE-2016-0549.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0510","description":"Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Business Views Catalog.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0509","description":"Unspecified vulnerability in the Oracle Internet Expenses component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to AP Web Utilities.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0508","description":"Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect integrity via unknown vectors related to Learner Administration.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0507","description":"Unspecified vulnerability in the Oracle iReceivables component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to AR Web Utilities, a different vulnerability than CVE-2016-0519.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0506","description":"Unspecified vulnerability in the Oracle Retail Order Management System Cloud Service component in Oracle Retail Applications 3.5, 4.5, 4.7, 5.0, and 15.0 allows remote attackers to affect confidentiality via unknown vectors related to Order Entry.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0497","description":"Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows remote attackers to affect integrity via unknown vectors related to Web Client.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0496","description":"Unspecified vulnerability in the MICROS CWDirect component in Oracle Retail Applications 12.5, 13.0, 14.0, 15.0, 16.0, 17.0, and 18.0 allows remote attackers to affect confidentiality via unknown vectors related to Order Entry.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0492","description":"Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0488. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the isAllowedUrl function, which allows remote attackers to bypass authentication via directory traversal sequences following a URI entry that does not require authentication, as demonstrated by olt/Login.do/../../olt/UploadFileUpload.do.","exploit_maturity":"Working exploit published","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0491","description":"Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect integrity and availability via unknown vectors related to Load Testing for Web Apps. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that the UploadFileAction servlet allows remote authenticated users to upload and execute arbitrary files via an * (asterisk) character in the fileType parameter.","exploit_maturity":"Working exploit published","published":"2016-01-21","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2016-0490","description":"Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0487. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the UploadServlet servlet, which allows remote attackers to upload and execute arbitrary files via directory traversal sequences in a filename header.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0489","description":"Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Test Manager for Web Apps. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the ActionServlet servlet, which allows remote authenticated users to upload and execute arbitrary files via directory traversal sequences in the tempfilename parameter in a ReportImage action.","exploit_maturity":"Forecast only","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0488","description":"Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0492. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the isAllowedUrl function in the admin pages, which allows remote attackers to bypass authentication and gain administrator access via directory traversal sequences following a URI entry that does not require authentication.","exploit_maturity":"Forecast only","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0487","description":"Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0490. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the process method in the ActionServlet servlet, which allows remote attackers to bypass authentication via directory traversal sequences following an unspecified URI string.","exploit_maturity":"Forecast only","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0486","description":"Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480, CVE-2016-0481, CVE-2016-0482, and CVE-2016-0485. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the exportFileName parameter.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0485","description":"Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480, CVE-2016-0481, CVE-2016-0482, and CVE-2016-0486. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the reportName parameter.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0484","description":"Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the scriptPath parameter.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0482","description":"Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480, CVE-2016-0481, CVE-2016-0485, and CVE-2016-0486. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0481","description":"Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480, CVE-2016-0482, CVE-2016-0485, and CVE-2016-0486. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the scheduleReportName parameter.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0480","description":"Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0481, CVE-2016-0482, CVE-2016-0485, and CVE-2016-0486. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the TMAPReportImage parameter.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0478","description":"Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0476 and CVE-2016-0477. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the scriptName parameter.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0477","description":"Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0476 and CVE-2016-0478. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the (1) repository, (2) workspace, or (3) scenario parameter.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0476","description":"Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0477 and CVE-2016-0478. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the reportName parameter.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0475","description":"Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0471","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote attackers to affect confidentiality via unknown vectors related to Multichannel Framework.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0470","description":"Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to BI Publisher Security.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0466","description":"Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect availability via vectors related to JAXP.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2016-0464","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to WLS-Console.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0463","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality via unknown vectors related to Portal.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0462","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect confidentiality via unknown vectors related to Multichannel Framework, a different vulnerability than CVE-2015-2650.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0460","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.55 allows remote attackers to affect integrity via unknown vectors related to Fluid Homepage and NavBar.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0459","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect integrity via unknown vectors related to Popup Windows.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0457","description":"Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0456. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to read arbitrary files, cause a denial of service, conduct server-side request forgery (SSRF) attacks, or conduct SMB Relay attacks via a crafted DTD in an XML request to OA_HTML/lcmServiceController.jsp.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0456","description":"Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0457. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to read arbitrary files, cause a denial of service, conduct server-side request forgery (SSRF) attacks, or conduct SMB Relay attacks via a crafted DTD in an XML request to OA_HTML/copxmllcmservicecontroller.js.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2016-0455","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality and availability via unknown vectors related to Agent Next Gen.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0450","description":"Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0449","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen, a different vulnerability than CVE-2016-0444 and CVE-2016-0447.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0448","description":"Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2016-0447","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen, a different vulnerability than CVE-2016-0444 and CVE-2016-0449.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0445","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0444","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen, a different vulnerability than CVE-2016-0447 and CVE-2016-0449.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0443","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 12.1.0.4, and 12.1.0.5 allows remote attackers to affect confidentiality via unknown vectors related to Agent Next Gen.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0442","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Loader Service.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0441","description":"Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Embedded Server.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0439","description":"Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality via vectors related to SSL support, a different vulnerability than CVE-2016-0430.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0433","description":"Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.9.0 allows remote attackers to affect confidentiality via vectors related to SSL support.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0430","description":"Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality via vectors related to SSL support, a different vulnerability than CVE-2016-0439.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0429","description":"Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect integrity via unknown vectors related to Scheduler, a different vulnerability than CVE-2016-0401.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0427","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0425","description":"Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Monitoring and Diagnostics.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0421","description":"Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Monitoring and Diagnostics SEC.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0415","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 12.1.0.4, and 12.1.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to UI Framework.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0413","description":"Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.1.7 allows remote authenticated users to affect integrity via vectors related to Federation protocol support.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0411","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1 and 11.2.0.4 allows local users to affect confidentiality, integrity, and availability via vectors related to Agent Next Gen.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0409","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Security.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0404","description":"Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.2.2 allows remote attackers to affect integrity via vectors related to Admin.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2016-0402","description":"Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2016-0401","description":"Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect integrity via unknown vectors related to Scheduler, a different vulnerability than CVE-2016-0429.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4919","description":"Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Monitoring and Diagnostics SEC.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4885","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 allows remote attackers to affect confidentiality via vectors related to Agent Next Gen.","exploit_maturity":"No public exploit","published":"2016-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2918","description":"The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.","exploit_maturity":"No public exploit","published":"2015-12-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-2913","description":"server/network/protocol/http/OHttpSessionManager.java in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 improperly relies on the java.util.Random class for generation of random Session ID values, which makes it easier for remote attackers to predict a value by determining the internal state of the PRNG in this class.","exploit_maturity":"No public exploit","published":"2015-12-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5004","description":"The Edge Component Caching Proxy in IBM WebSphere Application Server (WAS) 8.0 before 8.0.0.12 and 8.5 before 8.5.5.8 does not properly encrypt data, which allows remote authenticated users to obtain sensitive information via unspecified vectors.","exploit_maturity":"No public exploit","published":"2015-12-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-5326","description":"Cross-site scripting (XSS) vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message.","exploit_maturity":"No public exploit","published":"2015-11-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5324","description":"Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api.","exploit_maturity":"No public exploit","published":"2015-11-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5323","description":"Jenkins before 1.638 and LTS before 1.625.2 do not properly restrict access to API tokens which might allow remote administrators to gain privileges and run scripts by using an API token of another user.","exploit_maturity":"No public exploit","published":"2015-11-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5322","description":"Directory traversal vulnerability in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to list directory contents and read arbitrary files in the Jenkins servlet resources via directory traversal sequences in a request to jnlpJars/.","exploit_maturity":"No public exploit","published":"2015-11-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-5321","description":"The sidepanel widgets in the CLI command overview and help pages in Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to the pages.","exploit_maturity":"No public exploit","published":"2015-11-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5320","description":"Jenkins before 1.638 and LTS before 1.625.2 do not properly verify the shared secret used in JNLP slave connections, which allows remote attackers to connect as slaves and obtain sensitive information or possibly gain administrative access by leveraging knowledge of the name of a slave.","exploit_maturity":"No public exploit","published":"2015-11-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5319","description":"XML external entity (XXE) vulnerability in the create-job CLI command in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to read arbitrary files via a crafted job configuration that is then used in an \"XML-aware tool,\" as demonstrated by get-job and update-job.","exploit_maturity":"No public exploit","published":"2015-11-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-5318","description":"Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which makes it easier for remote attackers to bypass the CSRF protection mechanism via a brute force attack.","exploit_maturity":"No public exploit","published":"2015-11-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3665","description":"Jenkins before 1.587 and LTS before 1.580.1 do not properly ensure trust separation between a master and slaves, which might allow remote attackers to execute arbitrary code on the master by leveraging access to the slave.","exploit_maturity":"No public exploit","published":"2015-11-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5253","description":"The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a \"wrapping attack.\"","exploit_maturity":"No public exploit","published":"2015-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-2017","description":"CRLF injection vulnerability in IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.12, and 8.5 before 8.5.5.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.","exploit_maturity":"No public exploit","published":"2015-11-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-5210","description":"Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.","exploit_maturity":"No public exploit","published":"2015-11-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-1775","description":"Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.","exploit_maturity":"No public exploit","published":"2015-11-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5262","description":"http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unspecified vectors.","exploit_maturity":"No public exploit","published":"2015-10-27","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2015-5220","description":"The Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly (formerly JBoss Application Server) allows remote attackers to cause a denial of service (memory consumption) via a large request header.","exploit_maturity":"No public exploit","published":"2015-10-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5188","description":"Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) before 2.0.0.CR9 allows remote attackers to hijack the authentication of administrators for requests that make arbitrary changes to an instance via vectors involving a file upload using a multipart/form-data submission.","exploit_maturity":"No public exploit","published":"2015-10-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5178","description":"The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.","exploit_maturity":"No public exploit","published":"2015-10-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-4916","description":"Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.","exploit_maturity":"No public exploit","published":"2015-10-22","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-4912","description":"Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via vectors related to SSO Engine.","exploit_maturity":"No public exploit","published":"2015-10-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4909","description":"Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect integrity via vectors related to ADF Faces.","exploit_maturity":"No public exploit","published":"2015-10-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4908","description":"Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4916.","exploit_maturity":"No public exploit","published":"2015-10-22","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-4903","description":"Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI.","exploit_maturity":"No public exploit","published":"2015-10-22","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-4902","description":"Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.","exploit_maturity":"Exploited in the wild","published":"2015-10-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4899","description":"Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4898","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via vectors related to Diagnostics and DMZ.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4887","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ePerformance.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4886","description":"Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Reports Security. NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to read arbitrary files, cause a denial of service, or conduct SMB Relay attacks via a crafted DTD in an XML request involving the OA_HTML/copxml servlet.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-4884","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Single Signon.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4882","description":"Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-4880","description":"Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server, a different vulnerability than CVE-2015-4867.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4876","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect integrity via unknown vectors related to Pivot Grid.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4875","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote attackers to affect availability via unknown vectors related to Agent Next Gen.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4874","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4872","description":"Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect integrity via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-4871","description":"Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-4867","description":"Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server, a different vulnerability than CVE-2015-4880.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4859","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Agent Next Gen.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4854","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Single Signon. NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue is a cross-site scripting (XSS) vulnerability, which allows remote attackers to inject arbitrary web script or HTML via the Domain parameter in the CfgOCIReturn servlet.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4851","description":"Unspecified vulnerability in the Oracle iSupplier Portal component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to XML input. NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to read arbitrary files, cause a denial of service, or conduct SMB Relay attacks via a crafted DTD in an XML request to OA_HTML/oramipp_lpr.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-4850","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Management.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4849","description":"Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Punch-in. NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to cause a denial of service or conduct SMB Relay attacks via a crafted DTD in an XML request to OA_HTML/IspPunchInServlet.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-4848","description":"Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Integration with Peoplesoft.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4847","description":"Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related to OCI.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4845","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via vectors related to Java APIs - AOL/J. NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to enumerate database users via a series of requests to Aoljtest.js.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4842","description":"Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-4841","description":"Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM IP2014 and IP2015 allows remote attackers to affect confidentiality via unknown vectors related to Services.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4840","description":"Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-4838","description":"Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote authenticated users to affect confidentiality via vectors related to ADF Faces.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4832","description":"Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.2, and 11.1.2.3 allows remote attackers to affect integrity via vectors related to OIM Legacy UI.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4828","description":"Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via vectors related to FIN Resource Management (Security).","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4827","description":"Unspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle Retail Applications 3.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Framework.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4818","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 allows remote authenticated users to affect confidentiality and integrity via vectors related to PIA Core Technology.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4806","description":"Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-4804","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Management component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4799","description":"Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.1, and 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4793","description":"Unspecified vulnerability in the Oracle Communications Convergence component in Oracle Communications Applications 2.0 and 3.0.1 allows remote attackers to affect confidentiality via unknown vectors related to Mail Proxy.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4762","description":"Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 and 12.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Online patching.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4734","description":"Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JGSS.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-1829","description":"Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener.","exploit_maturity":"No public exploit","published":"2015-10-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-1813","description":"Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1812.","exploit_maturity":"No public exploit","published":"2015-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-1812","description":"Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1813.","exploit_maturity":"No public exploit","published":"2015-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-1810","description":"The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the \"Jenkins' own user database\" setting, which allows remote attackers to gain privileges by creating a reserved name.","exploit_maturity":"No public exploit","published":"2015-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-1806","description":"The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors.","exploit_maturity":"No public exploit","published":"2015-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5235","description":"IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page.","exploit_maturity":"No public exploit","published":"2015-10-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-5234","description":"IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.","exploit_maturity":"No public exploit","published":"2015-10-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-3158","description":"The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application resources via a (1) direct request or (2) request through an SP initiated flow.","exploit_maturity":"No public exploit","published":"2015-08-26","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2015-6524","description":"The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-3612 per ADT2 due to different vulnerability types.","exploit_maturity":"No public exploit","published":"2015-08-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-4938","description":"IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 allows remote attackers to spoof servlets and obtain sensitive information via unspecified vectors.","exploit_maturity":"No public exploit","published":"2015-08-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-1932","description":"IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially sensitive information about the proxy-server software by reading the HTTP Via header.","exploit_maturity":"No public exploit","published":"2015-08-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-1830","description":"Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.","exploit_maturity":"Working exploit published","published":"2015-08-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-6254","description":"The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in a SAML assertion matches the location from which the message was received, which allows remote attackers to have unspecified impact via unknown vectors. NOTE: this identifier was SPLIT from CVE-2015-0277 per ADT2 due to different vulnerability types.","exploit_maturity":"No public exploit","published":"2015-08-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-5531","description":"Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.","exploit_maturity":"Working exploit published","published":"2015-08-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-0277","description":"The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which allows remote attackers to log in to other users' accounts via a crafted SAML assertion. NOTE: this identifier has been SPLIT per ADT2 due to different vulnerability types. See CVE-2015-6254 for lack of validation for the Destination attribute in a Response element in a SAML assertion.","exploit_maturity":"No public exploit","published":"2015-08-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2015-5176","description":"The PortletRequestDispatcher in PortletBridge, as used in Red Hat JBoss Portal 6.2.0, does not properly enforce the security constraints of servlets, which allows remote attackers to gain access to resources via a request that asks to render a non-JSF resource.","exploit_maturity":"No public exploit","published":"2015-08-11","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-3267","description":"Cross-site scripting (XSS) vulnerability in the 404 error page in Red Hat JBoss Operations Network before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.","exploit_maturity":"No public exploit","published":"2015-08-11","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4773","description":"Unspecified vulnerability in the Hyperion Common Security component in Oracle Hyperion 11.1.2.2, 11.1.2.3, and 11.1.2.4 allows remote authenticated users to affect availability via unknown vectors related to User Account Update.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4768","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, and 6.3.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Diagnostics.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4759","description":"Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015-2636, and CVE-2015-4758.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4758","description":"Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015-2636, and CVE-2015-4759.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4751","description":"Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect availability via unknown vectors related to Authentication Engine.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4749","description":"Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2015-4747","description":"Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7 and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CEP system.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4746","description":"Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.0.0.7, 6.1.0.3, 6.1.1.5, and 6.2.0.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Global Spec Management.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4743","description":"Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to AD Utilities.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4742","description":"Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect availability via vectors related to ADF Faces.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4738","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM Candidate Gateway component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4735","description":"Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to affect confidentiality via vectors related to RAC Management.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4728","description":"Unspecified vulnerability in the Oracle Sourcing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Bid/Quote creation.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-3244","description":"The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPortlet, does not properly restrict access to restricted resources, which allows remote attackers to obtain sensitive information via a URL with a modified resource ID.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-2659","description":"Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allows remote attackers to affect availability via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-2658","description":"Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to SSL/TLS Support.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2657","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, and 6.3.0 through 6.3.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Business Process Automation.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2653","description":"Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Content Acquisition System.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2652","description":"Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Web Management.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2650","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect confidentiality via unknown vectors related to Multichannel Framework.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2647","description":"Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; and EM DB Control 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content Management.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2646","description":"Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 11.1.0.1; EM Plugin for DB: 12.1.0.5, 12.1.0.6, 12.1.0.7; EM DB Control: 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote attackers to affect integrity via unknown vectors related to Content Management.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2644","description":"Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote attackers to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2637","description":"Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-2635","description":"Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015-2636, CVE-2015-4758, and CVE-2015-4759.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2634","description":"Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2635, CVE-2015-2636, CVE-2015-4758, and CVE-2015-4759.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2632","description":"Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-2630","description":"Unspecified vulnerability in the Technology stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Applet startup.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2623","description":"Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2, and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0, allows remote attackers to affect integrity via unknown vectors related to Java Server Faces.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2622","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 allows remote attackers to affect integrity via unknown vectors related to Fluid Core.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2621","description":"Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect confidentiality via vectors related to JMX.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-2619","description":"Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-2615","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6, 12.1.3, and 12.2.3 allows remote attackers to affect confidentiality via unknown vectors related to Portal.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2612","description":"Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote attackers to affect confidentiality via vectors related to LDAP Security Adapter.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2610","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Popup windows.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2607","description":"Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.0.2, 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality via unknown vectors related to Content Acquisition System.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2601","description":"Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-2596","description":"Unspecified vulnerability in Oracle Java SE 7u80 allows remote attackers to affect integrity via unknown vectors related to Hotspot.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-2591","description":"Unspecified vulnerability in the PeopleSoft Enterprise Portal - Interaction Hub component in Oracle PeopleSoft Products 9.1.00 allows remote authenticated users to affect integrity via unknown vectors related to Enterprise Portal.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2588","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote attackers to affect integrity via vectors related to PIA Core Technology.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2587","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote attackers to affect integrity via vectors related to SWSE Server Infrastructure.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2584","description":"Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2015-2592.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-1926","description":"Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 and 11.1.1.9.0, and the Oracle Applications Framework component in Oracle E-Business Suite 12.2.3 and 12.2.4, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Portal.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0467","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0446","description":"Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-2634, CVE-2015-2635, CVE-2015-2636, CVE-2015-4758, and CVE-2015-4759.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0445","description":"Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015-2636, CVE-2015-4758, and CVE-2015-4759.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0444","description":"Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015-2636, CVE-2015-4758, and CVE-2015-4759.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0443","description":"Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015-2636, CVE-2015-4758, and CVE-2015-4759.","exploit_maturity":"No public exploit","published":"2015-07-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-1946","description":"IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0 before 7.0.0.6 for WebSphere Application Server (WAS) 7.0 and 8.0, does not properly implement user roles, which allows local users to gain privileges via unspecified vectors.","exploit_maturity":"No public exploit","published":"2015-07-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-1936","description":"The administrative console in IBM WebSphere Application Server (WAS) 8.0.0 before 8.0.0.11 and 8.5 before 8.5.5.6, when the Security feature is disabled, allows remote authenticated users to hijack sessions via the JSESSIONID parameter.","exploit_maturity":"No public exploit","published":"2015-07-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-1927","description":"The default configuration of IBM WebSphere Application Server (WAS) 7.0.0 before 7.0.0.39, 8.0.0 before 8.0.0.11, and 8.5 before 8.5.5.6 has a false value for the com.ibm.ws.webcontainer.disallowServeServletsByClassname WebContainer property, which allows remote attackers to obtain privileged access via unspecified vectors.","exploit_maturity":"No public exploit","published":"2015-07-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-1796","description":"The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID, which allows remote attackers to impersonate an entity via a certificate issued by a shibmd:KeyAuthority trust anchor.","exploit_maturity":"No public exploit","published":"2015-07-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-8175","description":"Red Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions and access the HawtIO console by leveraging an account defined in the users.properties file.","exploit_maturity":"No public exploit","published":"2015-07-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-7398","description":"main/java/com/ning/http/client/AsyncHttpClientConfig.java in Async Http Client (aka AHC or async-http-client) before 1.9.0 does not require a hostname match during verification of X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate.","exploit_maturity":"No public exploit","published":"2015-06-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-7397","description":"Async Http Client (aka AHC or async-http-client) before 1.9.0 skips X.509 certificate verification unless both a keyStore location and a trustStore location are explicitly set, which allows man-in-the-middle attackers to spoof HTTPS servers by presenting an arbitrary certificate during use of a typical AHC configuration, as demonstrated by a configuration that does not send client certificates.","exploit_maturity":"No public exploit","published":"2015-06-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-2859","description":"Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority names in X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.","exploit_maturity":"No public exploit","published":"2015-06-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-4559","description":"Cross-site scripting (XSS) vulnerability in the product deployment feature in the Java core web services in Intel McAfee ePolicy Orchestrator (ePO) before 5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2015-06-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-7810","description":"The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.","exploit_maturity":"No public exploit","published":"2015-06-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-0264","description":"Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile object in an XPath query.","exploit_maturity":"No public exploit","published":"2015-06-03","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-0263","description":"XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.","exploit_maturity":"No public exploit","published":"2015-06-03","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-2944","description":"Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to inject arbitrary web script or HTML via the URI, related to (1) org/apache/sling/api/servlets/HtmlResponse and (2) org/apache/sling/servlets/post/HtmlResponse.","exploit_maturity":"No public exploit","published":"2015-06-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-1833","description":"XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet servers via a crafted WebDAV request.","exploit_maturity":"Working exploit published","published":"2015-05-29","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-3337","description":"Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.","exploit_maturity":"Working exploit published","published":"2015-05-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-0175","description":"IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 does not properly implement authData elements, which allows remote authenticated users to gain privileges via unspecified vectors.","exploit_maturity":"No public exploit","published":"2015-04-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0174","description":"The SNMP implementation in IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.5 does not properly handle configuration data, which allows remote authenticated users to obtain sensitive information via unspecified vectors.","exploit_maturity":"No public exploit","published":"2015-04-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2572","description":"Unspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle Hyperion 11.1.2.5.216 and earlier, when running on Windows, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.","exploit_maturity":"Working exploit published","published":"2015-04-16","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2015-2570","description":"Unspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain Products Suite 11.5.10, 12.0, 12.1, and 12.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2565","description":"Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Create Item Instance.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0510","description":"Unspecified vulnerability in the Oracle Commerce Platform component in Oracle Commerce Platform 9.4, 10.0, and 10.2 allows remote attackers to affect integrity via vectors related to Dynamo Application Framework - HTML Admin User Interface.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0509","description":"Unspecified vulnerability in the Oracle Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to Reporting and Analysis.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0502","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1 and 8.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0497","description":"Unspecified vulnerability in the PeopleSoft Enterprise Portal Interaction Hub component in Oracle PeopleSoft Products 9.1.00 allows remote attackers to affect integrity via unknown vectors related to Enterprise Portal.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0496","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect confidentiality via vectors related to PIA Search Functionality.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0494","description":"Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Retail Applications 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0490","description":"Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BAS - Base Component.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0488","description":"Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availability via vectors related to JSSE.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2015-0487","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect integrity via vectors related to PIA Core Technology, a different vulnerability than CVE-2015-0472.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0484","description":"Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0492.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-0482","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.2.0 and 12.1.3.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to WLS-WebServices.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0480","description":"Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity and availability via unknown vectors related to Tools.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-0478","description":"Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiality via vectors related to JCE.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2015-0477","description":"Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity via unknown vectors related to Beans.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-0475","description":"Unspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle JD Edwards Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Runtime Security.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0473","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control MOS 12.1.0.5 and 12.1.0.6 allows remote attackers to affect integrity via unknown vectors related to My Oracle Support Plugin.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0470","description":"Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via unknown vectors related to Hotspot.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-0466","description":"Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0465","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, and 6.3.6 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0464","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, and 6.3.6 allows remote attackers to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0463","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, and 6.3.6 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0462","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, and 6.3.6 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0449","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect integrity via unknown vectors related to Console.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0447","description":"Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via vectors related to Configurator DMZ rules.","exploit_maturity":"No public exploit","published":"2015-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0250","description":"XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.","exploit_maturity":"No public exploit","published":"2015-03-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-0106","description":"Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x through 7.2.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.","exploit_maturity":"No public exploit","published":"2015-03-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-2351","description":"Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms 9.5.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) homelink parameter to system/modules/org.opencms.workplace.help/jsptemplates/help_head.jsp, (2) workplaceresource parameter to system/workplace/locales/en/help/index.html, (3) path parameter to system/workplace/views/admin/admin-main.jsp, (4) mode parameter to system/workplace/views/explorer/explorer_files.jsp, or (5) query parameter in a search action to system/modules/org.opencms.workplace.help/elements/search.jsp.","exploit_maturity":"No public exploit","published":"2015-03-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-0201","description":"The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors.","exploit_maturity":"No public exploit","published":"2015-03-10","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-0886","description":"Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.","exploit_maturity":"No public exploit","published":"2015-02-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-8114","description":"The UberFire Framework 0.3.x does not properly restrict paths, which allows remote attackers to (1) execute arbitrary code by uploading crafted content to FileUploadServlet or (2) read arbitrary files via vectors involving FileDownloadServlet.","exploit_maturity":"No public exploit","published":"2015-02-20","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-3578","description":"Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL.","exploit_maturity":"No public exploit","published":"2015-02-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-8122","description":"Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.","exploit_maturity":"No public exploit","published":"2015-02-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-7853","description":"The JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application Platform (EAP) before 6.3.3 does not properly assign socket-binding-ref sensitivity classification to the security-domain attribute, which allows remote authenticated users to obtain sensitive information by leveraging access to the security-domain attribute.","exploit_maturity":"No public exploit","published":"2015-02-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-7849","description":"The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP) 6.2.0 through 6.3.2 does not properly verify authorization conditions, which allows remote authenticated users to add, modify, and undefine otherwise restricted attributes by leveraging the Maintainer role.","exploit_maturity":"No public exploit","published":"2015-02-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-0227","description":"Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a vectors related to \"wrapping attacks.\"","exploit_maturity":"No public exploit","published":"2015-02-12","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2014-8110","description":"Multiple cross-site scripting (XSS) vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2015-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2015-0436","description":"Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Login.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0435","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0434","description":"Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect confidentiality via vectors related to Integration with OAM.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0431","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0 6.3.1, 6.3.2, 6.3.4, and 6.3.5 allows remote attackers to affect integrity via unknown vectors related to UI Infrastructure.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0426","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.3 and 12.1.0.4 allows remote attackers to affect confidentiality via unknown vectors related to UI Framework.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0425","description":"Unspecified vulnerability in the Oracle Enterprise Asset Management component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Siebel Core - Unix/Windows.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0422","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0421","description":"Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-0420","description":"Unspecified vulnerability in the Oracle Forms component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Forms Services.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0419","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Portal Framework, a different vulnerability than CVE-2013-1510.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0417","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal Framework, a different vulnerability than CVE-2015-0388.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0415","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Session Management.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0410","description":"Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0407","description":"Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-0404","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Error Messages.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0402","description":"Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to Integration - COM.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0401","description":"Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 and 11.1.1.7 allows remote authenticated users to affect integrity via unknown vectors related to Admin Console.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0400","description":"Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2015-0399","description":"Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.2 and 11.1.1.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Analytics Web General.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0398","description":"Unspecified vulnerability in the Siebel Life Sciences component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Clinical Trip Report.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0394","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect confidentiality via unknown vectors related to Report Distribution.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0393","description":"Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to DB Privileges. NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the researcher's claim that the PUBLIC role is granted the INDEX privilege for the DUAL table during a \"seeded install,\" which allows remote authenticated users to gain SYSDBA privileges and execute arbitrary code.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0392","description":"Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Config - Scripting.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0390","description":"Unspecified vulnerability in the MICROS Retail component in Oracle Retail Applications Xstore: 3.2.1, 3.4.2, 3.5.0, 4.0.1, 4.5.1, 4.8.0, 5.0.3, 5.5.3, 6.0.6, and 6.5.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Xstore Point of Sale.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0388","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal Framework, a different vulnerability than CVE-2015-0417.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0387","description":"Unspecified vulnerability in the Siebel Core - Server OM Services component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Security - LDAP Security Adapter.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0386","description":"Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener, a different vulnerability than CVE-2013-0338, CVE-2013-2877, and CVE-2014-0191.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0383","description":"Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-0380","description":"Unspecified vulnerability in the Oracle Telecommunications Billing Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to OA Based UI for Bill Summary.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0379","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 allows remote attackers to affect integrity via vectors related to PIA Core Technology.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0376","description":"Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to Content Server.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0372","description":"Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0369","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to AX/HI Web UI.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0368","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote attackers to affect availability via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0367","description":"Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via vectors related to SSO Engine.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0366","description":"Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Java Integration, a different vulnerability than CVE-2014-0369.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0365","description":"Unspecified vulnerability in the Siebel Core - Server Infrastructure component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0363","description":"Unspecified vulnerability in the Siebel Core EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect availability via unknown vectors related to Integration Business Services.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0362","description":"Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to BI Publisher Security.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-8152","description":"Apache Santuario XML Security for Java 2.0.x before 2.0.3 allows remote attackers to bypass the streaming XML signature protection mechanism via a crafted XML document.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-6597","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52, 8.53, and 8.54 allows remote authenticated users to affect integrity via vectors related to PIA Core Technology.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6596","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6594","description":"Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Learner Pages.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6587","description":"Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-6586","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Time and Labor.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6583","description":"Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3. allows remote attackers to affect confidentiality and integrity via unknown vectors related to Audience.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6582","description":"Unspecified vulnerability in the Oracle HCM Configuration Workbench component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Rapid Implementation.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6581","description":"Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Extract/Load Programs.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6580","description":"Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6579","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect confidentiality via unknown vectors related to Integration Broker.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6576","description":"Unspecified vulnerability in the Oracle Adaptive Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to OAM Integration.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6574","description":"Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 6.1.0.3 allows remote attackers to affect integrity via unknown vectors related to Testing Protocol Library.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6573","description":"Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 11.1.3 and 12.1.4 allows remote attackers to affect integrity via unknown vectors related to User Interface Framework.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6572","description":"Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors related to List of Values.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6571","description":"Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Listener, a different vulnerability than CVE-2011-1944.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6569","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality via vectors related to CIE Related Components.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6566","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 allows remote authenticated users to affect integrity via unknown vectors related to Portal.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6556","description":"Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AD_DDL.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6548","description":"Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 allows local users to affect confidentiality, integrity, and availability via vectors related to B2B Engine.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6528","description":"Unspecified vulnerability in the Siebel Core - System Management component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Server Infrastructure.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6526","description":"Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 allows remote attackers to affect integrity via unknown vectors related to Admin Console.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0191","description":"The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.","exploit_maturity":"No public exploit","published":"2015-01-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-0171","description":"XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.","exploit_maturity":"No public exploit","published":"2015-01-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2015-0922","description":"McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 uses the same secret key across different customers' installations, which allows attackers to obtain the administrator password by leveraging knowledge of the encrypted password.","exploit_maturity":"No public exploit","published":"2015-01-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2015-0921","description":"XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do.","exploit_maturity":"No public exploit","published":"2015-01-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-9527","description":"HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service (infinite loop and deadlock) via a crafted PPT file.","exploit_maturity":"No public exploit","published":"2015-01-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3628","description":"Cross-site scripting (XSS) vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object.","exploit_maturity":"No public exploit","published":"2015-01-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-8890","description":"IBM WebSphere Application Server Liberty Profile 8.5.x before 8.5.5.4 allows remote attackers to gain privileges by leveraging the combination of a servlet's deployment descriptor security constraints and ServletSecurity annotations.","exploit_maturity":"No public exploit","published":"2014-12-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6174","description":"IBM WebSphere Application Server 7.x before 7.0.0.37, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.4 allows remote attackers to conduct clickjacking attacks via a crafted web site.","exploit_maturity":"No public exploit","published":"2014-12-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6167","description":"Cross-site scripting (XSS) vulnerability in the URL rewriting feature in IBM WebSphere Application Server 7.x before 7.0.0.37, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.","exploit_maturity":"No public exploit","published":"2014-12-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6166","description":"The Communications Enabled Applications (CEA) service in IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4, and Feature Pack for CEA 1.x before 1.0.0.15, allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.","exploit_maturity":"No public exploit","published":"2014-12-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-6164","description":"IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4 allows remote attackers to spoof OpenID and OpenID Connect cookies, and consequently obtain sensitive information, via a crafted URL.","exploit_maturity":"No public exploit","published":"2014-12-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-7852","description":"Cross-site scripting (XSS) vulnerability in JBoss RichFaces, as used in JBoss Portal 6.1.1, allows remote attackers to inject arbitrary web script or HTML via crafted URL, which is not properly handled in a CSS file.","exploit_maturity":"No public exploit","published":"2014-12-11","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-3627","description":"The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive, which is not properly handled during localization, related to distributed cache.","exploit_maturity":"No public exploit","published":"2014-12-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-7816","description":"Directory traversal vulnerability in JBoss Undertow 1.0.x before 1.0.17, 1.1.x before 1.1.0.CR5, and 1.2.x before 1.2.0.Beta3, when running on Windows, allows remote attackers to read arbitrary files via a .. (dot dot) in a resource URI.","exploit_maturity":"No public exploit","published":"2014-12-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-7839","description":"DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities features, which allows remote attackers to conduct XML external entity (XXE) attacks via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-11-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-5326","description":"Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-11-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-5325","description":"The (1) DOMConverter, (2) JDOMConverter, (3) DOM4JConverter, and (4) XOMConverter functions in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allow remote attackers to read arbitrary files via DOM data containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.","exploit_maturity":"No public exploit","published":"2014-11-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-3625","description":"Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling.","exploit_maturity":"Proof of concept only","published":"2014-11-20","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-3623","description":"Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation method security semantics, which allows remote attackers to conduct spoofing attacks via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-10-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3584","description":"The SamlHeaderInHandler in Apache CXF before 2.6.11, 2.7.x before 2.7.8, and 3.0.x before 3.0.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted SAML token in the authorization header of a request to a JAX-RS service.","exploit_maturity":"No public exploit","published":"2014-10-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-5075","description":"The Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.","exploit_maturity":"No public exploit","published":"2014-10-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-3604","description":"Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.","exploit_maturity":"No public exploit","published":"2014-10-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3021","description":"IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 does not properly handle HTTP headers, which allows remote attackers to obtain sensitive cookie and authentication data via an unspecified HTTP method.","exploit_maturity":"No public exploit","published":"2014-10-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2066","description":"Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the \"override\" of Jenkins cookies.","exploit_maturity":"No public exploit","published":"2014-10-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-2065","description":"Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.","exploit_maturity":"No public exploit","published":"2014-10-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-2064","description":"The loadUserByUsername function in hudson/security/HudsonPrivateSecurityRealm.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to determine whether a user exists via vectors related to failed login attempts.","exploit_maturity":"No public exploit","published":"2014-10-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-2062","description":"Jenkins before 1.551 and LTS before 1.532.2 does not invalidate the API token when a user is deleted, which allows remote authenticated users to retain access via the token.","exploit_maturity":"No public exploit","published":"2014-10-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-2061","description":"The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value.","exploit_maturity":"No public exploit","published":"2014-10-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-2060","description":"The Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack sessions via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-10-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-2058","description":"BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330.","exploit_maturity":"No public exploit","published":"2014-10-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-7330","description":"Jenkins before 1.502 allows remote authenticated users to configure an otherwise restricted project via vectors related to post-build actions.","exploit_maturity":"No public exploit","published":"2014-10-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3680","description":"Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of a parameterized job by reading the DOM.","exploit_maturity":"No public exploit","published":"2014-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3679","description":"The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.","exploit_maturity":"No public exploit","published":"2014-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3667","description":"Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code.","exploit_maturity":"No public exploit","published":"2014-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3663","description":"Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3662","description":"Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts.","exploit_maturity":"No public exploit","published":"2014-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3661","description":"Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (thread consumption) via vectors related to a CLI handshake.","exploit_maturity":"No public exploit","published":"2014-10-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-6561","description":"Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 12.0.4, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Separate Remittance Advice.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6557","description":"Unspecified vulnerability in the Application Performance Management component in Oracle Enterprise Manager Grid Control before 12.1.0.6.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to End User Experience Management.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6554","description":"Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Admin Console.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6553","description":"Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Admin Console.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6552","description":"Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors related to Admin Console.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6550","description":"Unspecified vulnerability in the Oracle Applications Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to iHelp.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6539","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related to LOV, a different vulnerability than CVE-2014-6472.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6535","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52, 8.53, and 8.54 allows remote attackers to affect confidentiality and integrity via vectors related to SECURITY.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6534","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote authenticated users to affect integrity via vectors related to WLS Console.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6533","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1 and 6.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6531","description":"Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-6523","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via vectors related to REST Interface.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6522","description":"Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.4, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via vectors related to ADF Faces.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6519","description":"Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Hotspot.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-6517","description":"Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.3 allows remote attackers to affect confidentiality via vectors related to JAXP.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-6516","description":"Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 8.98 allows local users to affect confidentiality, integrity, and availability via vectors related to Installation SEC.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6512","description":"Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2014-6511","description":"Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality via unknown vectors related to 2D.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-6506","description":"Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-6504","description":"Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Hotspot.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-6499","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to WebLogic Tuxedo Connector.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6498","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6486","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect integrity via unknown vectors related to Talent Acquisition Manager - Security.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6482","description":"Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect integrity via unknown vectors related to Updates Change Assistant.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6479","description":"Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via vectors related to OC4J Configuration.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6472","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related to LOV, a different vulnerability than CVE-2014-6539.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6471","description":"Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related to OAM Diagnostics.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6468","description":"Unspecified vulnerability in Oracle Java SE 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2014-6465","description":"Unspecified vulnerability in the Oracle Communications Session Border Controller component in Oracle Communications Applications SCX640m5 allows remote authenticated users to affect availability via unknown vectors related to Lawful Intercept.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6462","description":"Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors related to Admin Console.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6461","description":"Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Roles \u0026 Privileges.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-6460","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52, 8.53, and 8.54 allows remote authenticated users to affect confidentiality and integrity via vectors related to QUERY.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4285","description":"Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Reports Configuration.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4281","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Portal Integration.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-3681","description":"Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3664","description":"Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ permission to read arbitrary files via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-10-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-6439","description":"Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-10-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3678","description":"Cross-site scripting (XSS) vulnerability in the Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-10-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-1868","description":"Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack.","exploit_maturity":"No public exploit","published":"2014-10-06","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-0168","description":"Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.","exploit_maturity":"No public exploit","published":"2014-10-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3558","description":"ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.","exploit_maturity":"No public exploit","published":"2014-09-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-0170","description":"Teiid before 8.4.3 and before 8.7 and Red Hat JBoss Data Virtualization 6.0.0 before patch 3 allows remote attackers to read arbitrary files via a crafted request to a REST endpoint, related to an XML External Entity (XXE) issue.","exploit_maturity":"No public exploit","published":"2014-09-30","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-4816","description":"Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.","exploit_maturity":"No public exploit","published":"2014-09-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-4444","description":"Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file.","exploit_maturity":"No public exploit","published":"2014-09-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-4758","description":"IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.x allow remote authenticated users to bypass intended access restrictions and send requests to internal services via a callService URL.","exploit_maturity":"No public exploit","published":"2014-09-04","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-3574","description":"Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack.","exploit_maturity":"No public exploit","published":"2014-09-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3529","description":"The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.","exploit_maturity":"No public exploit","published":"2014-09-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2012-6153","description":"http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5783.","exploit_maturity":"No public exploit","published":"2014-09-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-3596","description":"The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5784.","exploit_maturity":"No public exploit","published":"2014-08-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-4767","description":"IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.3 does not properly use the Liberty Repository for feature installation, which allows remote authenticated users to execute arbitrary code via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-08-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-3083","description":"IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.35, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.3 does not properly restrict resource access, which allows remote attackers to obtain sensitive information via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-08-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-3070","description":"The addFileRegistryAccount Virtual Member Manager (VMM) SPI Admin Task in IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3 does not properly create accounts, which allows remote attackers to bypass intended access restrictions via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-08-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-3022","description":"IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted URL that triggers an error condition.","exploit_maturity":"No public exploit","published":"2014-08-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0965","description":"IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted SOAP response.","exploit_maturity":"No public exploit","published":"2014-08-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-3577","description":"org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.","exploit_maturity":"No public exploit","published":"2014-08-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-3472","description":"The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.3.0, does not properly check caller roles, which allows remote authenticated users to bypass access restrictions via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-08-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3464","description":"The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) 6.2.0 and 6.3.0, does not properly enforce the method level restrictions for outbound messages, which allows remote authenticated users to access otherwise restricted JAX-WS handlers by leveraging permissions to the EJB class. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2133.","exploit_maturity":"No public exploit","published":"2014-08-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3087","description":"callService.do in IBM Business Process Manager (BPM) 7.5 through 8.5.5 and WebSphere Lombardi Edition 7.2 through 7.2.0.5 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.","exploit_maturity":"No public exploit","published":"2014-08-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-3518","description":"jmx-remoting.sar in JBoss Remoting, as used in Red Hat JBoss Enterprise Application Platform (JEAP) 5.2.0, Red Hat JBoss BRMS 5.3.1, Red Hat JBoss Portal Platform 5.2.2, and Red Hat JBoss SOA Platform 5.3.1, does not properly implement the JSR 160 specification, which allows remote attackers to execute arbitrary code via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-07-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0957","description":"Cross-site scripting (XSS) vulnerability in IBM Business Process Manager 7.5 through 8.5.5, and WebSphere Lombardi Edition 7.2, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers a service failure.","exploit_maturity":"No public exploit","published":"2014-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4271","description":"Unspecified vulnerability in the Hyperion Essbase component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect availability via unknown vectors related to Agent.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4270","description":"Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to User Interface, a different vulnerability than CVE-2014-4269.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4269","description":"Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to User Interface, a different vulnerability than CVE-2014-4270.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4268","description":"Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Swing.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-4267","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4266","description":"Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Serviceability.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-4263","description":"Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to \"Diffie-Hellman key agreement.\"","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2014-4256","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality and integrity via vectors related to WLS - Deployment.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4255","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Security and Policy.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4254","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Web Services.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4253","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via vectors related to WebLogic Server JVM.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4252","description":"Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-4249","description":"Unspecified vulnerability in the BI Publisher component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to Mobile Service.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4244","description":"Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and JRockit R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2014-4242","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect integrity via unknown vectors related to Console.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4241","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect integrity via vectors related to WLS - Web Services.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4234","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, and 6.3.4 allows remote attackers to affect confidentiality via unknown vectors related to Data, Domain \u0026 Function Security.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4231","description":"Unspecified vulnerability in the Siebel Travel \u0026 Transportation component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Diary.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4230","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to Open_UI, a different vulnerability than CVE-2014-2468.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4229","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, and 6.3.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Data, Domain, and Function Security.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4226","description":"Unspecified vulnerability in the PeopleSoft Enterprise FIN Install component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4221","description":"Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-4218","description":"Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-4217","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, and 12.1.1.0 allows remote attackers to affect integrity via vectors related to WLS - Web Services.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4213","description":"Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, and 12.2.3 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4212","description":"Unspecified vulnerability in the Oracle Fusion Middleware component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to Process Mgmt and Notification.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4211","description":"Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect integrity via unknown vectors related to Portlet Services.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4210","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services.","exploit_maturity":"Working exploit published","published":"2014-07-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2014-4209","description":"Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality and integrity via vectors related to JMX.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-4205","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-2491.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4203","description":"Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Property Editing.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4202","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via vectors related to WLS - Web Services.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-4201","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via vectors related to WLS - Web Services.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2496","description":"Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Test Framework.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2493","description":"Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, and 12.1.2.0.0 allows remote attackers to affect confidentiality and availability via vectors related to ADF Faces.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2492","description":"Unspecified vulnerability in the Oracle Agile Product Collaboration component in Oracle Supply Chain Products Suite 9.3.3 allows remote attackers to affect integrity via unknown vectors related to Web client (PC).","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2491","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-4205.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2482","description":"Unspecified vulnerability in the Oracle Concurrent Processing component in Oracle E-Business Suite 12.1.3, 12.2.2, and 12.2.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2481","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-2480.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2480","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-2481.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2479","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Web Services.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2456","description":"Unspecified vulnerability in the PeopleSoft Enterprise ELS Enterprise Learning Management component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0436","description":"Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to Web Analysis.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5855","description":"Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) \u003ch:outputText\u003e tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors.","exploit_maturity":"No public exploit","published":"2014-07-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-3503","description":"Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a brute force attack.","exploit_maturity":"No public exploit","published":"2014-07-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-3481","description":"org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform (JEAP) before 6.2.4 enables entity expansion, which allows remote attackers to read arbitrary files via unspecified vectors, related to an XML External Entity (XXE) issue.","exploit_maturity":"No public exploit","published":"2014-07-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-0248","description":"org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.2.0 allows remote attackers to execute arbitrary code via a crafted authentication header, related to Seam logging.","exploit_maturity":"No public exploit","published":"2014-07-07","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0035","description":"The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.","exploit_maturity":"No public exploit","published":"2014-07-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-0034","description":"The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.","exploit_maturity":"No public exploit","published":"2014-07-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-0891","description":"IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive information by leveraging incorrect request handling by the (1) Proxy or (2) ODR server.","exploit_maturity":"No public exploit","published":"2014-06-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-4367","description":"Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.12 and 2.1.x before 2.1.6 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) ln parameter to faces/javax.faces.resource/web.xml or (2) the PATH_INFO to faces/javax.faces.resource/.","exploit_maturity":"Working exploit published","published":"2014-06-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-3004","description":"The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML document.","exploit_maturity":"Working exploit published","published":"2014-06-11","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-0119","description":"Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application.","exploit_maturity":"No public exploit","published":"2014-05-31","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-0099","description":"Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.","exploit_maturity":"No public exploit","published":"2014-05-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-0096","description":"java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.","exploit_maturity":"No public exploit","published":"2014-05-31","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-0095","description":"java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service (thread consumption) by using a \"Content-Length: 0\" AJP request to trigger a hang in request processing.","exploit_maturity":"No public exploit","published":"2014-05-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-0075","description":"Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.","exploit_maturity":"No public exploit","published":"2014-05-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-2034","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary code or (2) initiate deployment of binaries to a Maven repository via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-05-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-0116","description":"CookieInterceptor in Apache Struts 2.x before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to \"manipulate\" the ClassLoader and modify session state via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0113.","exploit_maturity":"No public exploit","published":"2014-05-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-0110","description":"Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.","exploit_maturity":"No public exploit","published":"2014-05-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-0109","description":"Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.","exploit_maturity":"No public exploit","published":"2014-05-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-0193","description":"WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames.","exploit_maturity":"No public exploit","published":"2014-05-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-0896","description":"IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive information via a crafted request.","exploit_maturity":"No public exploit","published":"2014-05-01","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0859","description":"The web-server plugin in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, when POST retries are enabled, allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-05-01","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0857","description":"The Administrative Console in IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote authenticated users to obtain sensitive information via a crafted request.","exploit_maturity":"No public exploit","published":"2014-05-01","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0823","description":"IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote attackers to read arbitrary files via a crafted URL.","exploit_maturity":"No public exploit","published":"2014-05-01","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-7259","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary code, as demonstrated by a request to (1) db/data/ext/GremlinPlugin/graphdb/execute_script or (2) db/manage/server/console/.","exploit_maturity":"No public exploit","published":"2014-04-29","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-6469","description":"JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression. NOTE: some of these details are obtained from third party information.","exploit_maturity":"No public exploit","published":"2014-04-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-2880","description":"Open redirect vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backUrl parameter in a changepwd action to identity/faces/firstlogin.","exploit_maturity":"Working exploit published","published":"2014-04-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-0111","description":"Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, \"derived schema definition,\" \"user / role templates,\" and \"account links of resource mappings.\"","exploit_maturity":"No public exploit","published":"2014-04-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-0054","description":"The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4152, CVE-2013-7315, and CVE-2013-6429.","exploit_maturity":"Forecast only","published":"2014-04-17","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-2471","description":"Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2468","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to Open_UI, a different vulnerability than CVE-2014-4230.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2465","description":"Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote attackers to affect integrity via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2461","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, and 6.3.3 allows remote attackers to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2460","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, and 6.3.3 allows remote authenticated users to affect confidentiality via vectors related to CSV Management.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2458","description":"Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.1.0.3 and 6.1.1.3 allows remote attackers to affect integrity via unknown vectors related to Install.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2457","description":"Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.0 and 6.1.0 allows remote attackers to affect integrity via unknown vectors related to Install.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2455","description":"Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to User Interface.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2454","description":"Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via unknown vectors related to User Interface.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2453","description":"Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to User Interface.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2452","description":"Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 allows remote authenticated users to affect availability via unknown vectors related to Webserver Plugin.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2449","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS Talent Acquisition Manager component in Oracle PeopleSoft Products 9.0, 9.1, and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2448","description":"Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Install and Packaging.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2447","description":"Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Integration Broker, a different vulnerability than CVE-2014-2437.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2446","description":"Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect confidentiality via vectors related to QAS.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2443","description":"Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect integrity via vectors related to PIA Core Technology.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2437","description":"Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Integration Broker, a different vulnerability than CVE-2014-2447.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2433","description":"Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.53 allows remote attackers to affect availability via unknown vectors related to Integration Broker.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2429","description":"Unspecified vulnerability in the PeopleSoft Enterprise CS Campus Self Service component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Campus Mobile.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2426","description":"Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity and availability via unknown vectors related to Admin Console.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2425","description":"Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2424","description":"Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system.","exploit_maturity":"Working exploit published","published":"2014-04-16","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2014-2422","description":"Unspecified vulnerability in Oracle Java SE 7u51 and 8, and JavaFX 2.2.51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-2418","description":"Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2415, CVE-2014-2416, and CVE-2014-2417.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2417","description":"Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2415, CVE-2014-2416, and CVE-2014-2418.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2416","description":"Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2415, CVE-2014-2417, and CVE-2014-2418.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2415","description":"Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2416, CVE-2014-2417, and CVE-2014-2418.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2413","description":"Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-2411","description":"Unspecified vulnerability in the Oracle Identity Analytics component in Oracle Fusion Middleware Oracle Identity Analytics 11.1.1.5 and Sun Role Manager 5.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2407","description":"Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2415, CVE-2014-2416, CVE-2014-2417, and CVE-2014-2418.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2404","description":"Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 10.1.4.3, 11.1.1.3.0, 11.1.1.5.0, 11.1.1.7.0, 11.1.2.0.0, 11.1.2.1.0, and 11.1.2.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to WebGate.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2403","description":"Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-2401","description":"Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-2400","description":"Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle Endeca Information Discovery (Formerly Latitude), a different vulnerability than CVE-2014-2399.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-2399","description":"Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle Endeca Information Discovery (Formerly Latitude), a different vulnerability than CVE-2014-2400.","exploit_maturity":"Working exploit published","published":"2014-04-16","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2014-0464","description":"Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0463.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-0463","description":"Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0464.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-0460","description":"Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-0459","description":"Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-0450","description":"Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect confidentiality via unknown vectors related to People Connection.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0426","description":"Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP Request Handling, a different vulnerability than CVE-2014-0413.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0414","description":"Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality via vectors related to HTTP Request Handling.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0413","description":"Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP Request Handling, a different vulnerability than CVE-2014-0426.","exploit_maturity":"No public exploit","published":"2014-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5704","description":"The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass \"RequestHeader unset\" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states \"this is not a security issue in httpd as such.\"","exploit_maturity":"Forecast only","published":"2014-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-6468","description":"JBoss Drools, Red Hat JBoss BRMS before 6.0.1, and Red Hat JBoss BPM Suite before 6.0.1 allows remote authenticated users to execute arbitrary Java code via a (1) MVFLEX Expression Language (MVEL) or (2) Drools expression.","exploit_maturity":"No public exploit","published":"2014-04-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0093","description":"Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager (JSM), does not properly apply permissions defined by a policy file, which causes applications to be granted the java.security.AllPermission permission and allows remote attackers to bypass intended access restrictions.","exploit_maturity":"No public exploit","published":"2014-04-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0086","description":"The doFilter function in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a large number of malformed atmosphere push requests.","exploit_maturity":"No public exploit","published":"2014-03-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-1904","description":"Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action.","exploit_maturity":"No public exploit","published":"2014-03-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-0094","description":"The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to \"manipulate\" the ClassLoader via the class parameter, which is passed to the getClass method.","exploit_maturity":"Working exploit published","published":"2014-03-11","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2014-2059","description":"Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name.","exploit_maturity":"No public exploit","published":"2014-03-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-2205","description":"The Import and Export Framework in McAfee ePolicy Orchestrator (ePO) before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity (XXE) issue.","exploit_maturity":"No public exploit","published":"2014-02-26","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-4590","description":"Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain \"Tomcat internals\" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.","exploit_maturity":"No public exploit","published":"2014-02-26","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-4322","description":"Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.","exploit_maturity":"No public exploit","published":"2014-02-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-4580","description":"Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2014-02-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2941","description":"Open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the initialURI parameter.","exploit_maturity":"No public exploit","published":"2014-02-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-6440","description":"The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.","exploit_maturity":"No public exploit","published":"2014-02-14","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2012-1100","description":"Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request.","exploit_maturity":"No public exploit","published":"2014-02-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-0062","description":"Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 allows remote attackers to hijack agent sessions via an agent registration request without a security token.","exploit_maturity":"No public exploit","published":"2014-02-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-0052","description":"Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identity of arbitrary agents via the registered agent name.","exploit_maturity":"No public exploit","published":"2014-02-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2014-1876","description":"The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.","exploit_maturity":"No public exploit","published":"2014-02-10","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2011-4610","description":"JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a \"surrogate pair character\" that is \"at the boundary of an internal buffer.\"","exploit_maturity":"No public exploit","published":"2014-02-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-1880","description":"Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet in the demo web application in Apache ActiveMQ before 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the refresh parameter to demo/portfolioPublish, a different vulnerability than CVE-2012-6092.","exploit_maturity":"No public exploit","published":"2014-02-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-6235","description":"Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listenertype or (2) currentlistener parameter to mondetail.jsp or ArraySQL parameter to (3) mondetail.jsp, (4) jamonadmin.jsp, (5) sql.jsp, or (6) exceptions.jsp.","exploit_maturity":"No public exploit","published":"2014-01-31","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-6429","description":"The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152 and CVE-2013-7315.","exploit_maturity":"Forecast only","published":"2014-01-26","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-7315","description":"The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not disable external entity resolution for the StAX XMLInputFactory, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML with JAXB, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152. NOTE: this issue was SPLIT from CVE-2013-4152 due to different affected versions.","exploit_maturity":"No public exploit","published":"2014-01-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-4152","description":"The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via an XML external entity declaration in conjunction with an entity reference in a (1) DOMSource, (2) StAXSource, (3) SAXSource, or (4) StreamSource, aka an XML External Entity (XXE) issue.","exploit_maturity":"No public exploit","published":"2014-01-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-6325","description":"IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote attackers to cause a denial of service (resource consumption) via a crafted request to a web services endpoint.","exploit_maturity":"No public exploit","published":"2014-01-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0445","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect integrity via vectors related to PIA Core Technology, a different vulnerability than CVE-2014-0381.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0443","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 allows remote attackers to affect integrity via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0441","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect availability via unknown vectors related to Integration Broker.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0440","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect availability via vectors related to PIA Core Technology.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0439","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect integrity via unknown vectors related to Report Distribution.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0438","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect confidentiality via unknown vectors related to Panel Processor.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0435","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, and 6.3.2 allows remote authenticated users to affect availability via unknown vectors related to Data, Domain \u0026 Function Security.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0434","description":"Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.0, 6.1, and 6.1.1 allows remote attackers to affect integrity via unknown vectors related to Installation.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0425","description":"Unspecified vulnerability in the PeopleSoft Enterprise SCM Services Procurement component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0423","description":"Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2014-0416","description":"Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-0400","description":"Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 11.1.1.6 and 11.1.1.7 allows remote authenticated users to affect confidentiality via vectors related to OID LDAP server.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0399","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.2, 6.3, 6.3.1, and 6.3.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Data, Domain \u0026 Function Security.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0398","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Discoverer.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0396","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Portal - Web Services.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0395","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Updates Environment Mgmt, a different vulnerability than CVE-2014-0394.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0394","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Updates Environment Mgmt, a different vulnerability than CVE-2014-0395.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0392","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0391","description":"Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.0, and 11.1.2.1 allows remote attackers to affect confidentiality via unknown vectors related to End User Self Service.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0389","description":"Unspecified vulnerability in Oracle iLearning 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0388","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS Human Resources component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Org and Workforce Dev.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0380","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect integrity via vectors related to MultiChannel Framework (MCF).","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0379","description":"Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0.x, 7.3.1.x, 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect integrity via unknown vectors related to DM Others.","exploit_maturity":"Working exploit published","published":"2014-01-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2014-0376","description":"Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAXP. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an improper check for \"code permissions when creating document builder factories.\"","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-0374","description":"Unspecified vulnerability in the Oracle Portal component in Oracle Fusion Middleware 11.1.1.6 allows remote attackers to affect integrity via unknown vectors related to Page Parameters and Events.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0372","description":"Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, and 12.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to DM Others.","exploit_maturity":"Working exploit published","published":"2014-01-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2014-0369","description":"Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Java Integration, a different vulnerability than CVE-2015-0366.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0368","description":"Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded 7u45, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to incorrect permission checks when listening on a socket, which allows attackers to escape the sandbox.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2014-0367","description":"Unspecified vulnerability in the Hyperion Essbase Administration Services component in Oracle Hyperion 11.1.2.1, 11.1.2.2, and 11.1.2.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Admin Console.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2014-0366","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, and 12.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Attachments.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5910","description":"Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-5909","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Org and Workforce Dev.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5901","description":"Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.2.0 and 11.1.2.1 allows remote attackers to affect confidentiality via unknown vectors related to Identity Console.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5900","description":"Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.0, and 11.1.2.1 allows remote attackers to affect integrity via unknown vectors related to End User Self Service.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5897","description":"Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.0, 6.1, and 6.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Manage Data Cache.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5896","description":"Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that com.sun.corba.se and its sub-packages are not included on the restricted package list.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-5890","description":"Unspecified vulnerability in the Oracle Payroll component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3, and 12.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Exception Reporting.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5886","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors related to Common Application Objects.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5884","description":"Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-5880","description":"Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.","exploit_maturity":"Working exploit published","published":"2014-01-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2013-5879","description":"Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5877","description":"Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.","exploit_maturity":"Working exploit published","published":"2014-01-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2013-5873","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Integration Broker.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5869","description":"Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.6.0, 11.1.1.7.0, and 11.1.1.8.0 allows remote attackers to affect confidentiality via unknown vectors related to Page Service.","exploit_maturity":"No public exploit","published":"2014-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5795","description":"Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, 12.2.2, and 12.2.3 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.","exploit_maturity":"Working exploit published","published":"2014-01-15","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2013-4517","description":"Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.","exploit_maturity":"No public exploit","published":"2014-01-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-5573","description":"Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.","exploit_maturity":"Working exploit published","published":"2013-12-31","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2013-4424","description":"Multiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal component in Red Hat JBoss Portal 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-12-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5676","description":"The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (cleartext passwords) by reading the value in the sonar.sonarPassword parameter from jenkins/configure.","exploit_maturity":"Working exploit published","published":"2013-12-13","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2013-6408","description":"The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407.","exploit_maturity":"No public exploit","published":"2013-12-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-6407","description":"The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.","exploit_maturity":"No public exploit","published":"2013-12-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-6397","description":"Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.","exploit_maturity":"Forecast only","published":"2013-12-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-2133","description":"The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) before 6.2.0, does not properly enforce the method level restrictions for JAX-WS Service endpoints, which allows remote authenticated users to access otherwise restricted JAX-WS handlers by leveraging permissions to the EJB class.","exploit_maturity":"No public exploit","published":"2013-12-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-6373","description":"The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-11-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-5417","description":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via HTTP response data.","exploit_maturity":"No public exploit","published":"2013-11-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-4204","description":"Multiple cross-site scripting (XSS) vulnerabilities in the JUnit files in the GWTTestCase in Google Web Toolkit (GWT) before 2.5.1 RC1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-11-18","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-4006","description":"IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.5.1 uses weak permissions for unspecified files, which allows local users to obtain sensitive information via standard filesystem operations.","exploit_maturity":"No public exploit","published":"2013-11-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-6357","description":"Cross-site request forgery (CSRF) vulnerability in the Manager application in Apache Tomcat 5.5.25 and earlier allows remote attackers to hijack the authentication of administrators for requests that manipulate application deployment via the POST method, as demonstrated by a /manager/html/undeploy?path= URI. NOTE: the vendor disputes the significance of this report, stating that \"the Apache Tomcat Security team has not accepted any reports of CSRF attacks against the Manager application ... as they require a reckless system administrator.","exploit_maturity":"Working exploit published","published":"2013-11-13","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2013-6348","description":"Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.3.15.3 allow remote attackers to inject arbitrary web script or HTML via the namespace parameter to (1) actionNames.action and (2) showConfig.action in config-browser/.","exploit_maturity":"No public exploit","published":"2013-11-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-4529","description":"The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id (1) via a man-in-the-middle attack or (2) by reading a log.","exploit_maturity":"No public exploit","published":"2013-10-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-4390","description":"Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the resource parameter, related to \"a custom login form and XSS.\"","exploit_maturity":"No public exploit","published":"2013-10-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-4295","description":"The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.","exploit_maturity":"Working exploit published","published":"2013-10-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-2254","description":"The deepGetOrCreateNode function in impl/operations/AbstractCreateOperation.java in org.apache.sling.servlets.post.bundle 2.2.0 and 2.3.0 in Apache Sling does not properly handle a NULL value that returned when the session does not have permissions to the root node, which allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-10-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-5867","description":"Unspecified vulnerability in the Siebel Core - Server Infrastructure component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via vectors related to SISNAPI \u0026 Network Infrastructure.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5859","description":"Unspecified vulnerability in the Instantis EnterpriseTrack component in Oracle Primavera Products Suite 8.0.6 and 8.5 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5851","description":"Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JAXP.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-5849","description":"Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to AWT.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-5847","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS eCompensation component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to eCompensation.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5845","description":"Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Administration.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5841","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Portal, a different vulnerability than CVE-2013-5794.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5840","description":"Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-5836","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Business Interlink.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5835","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Open_UI.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5828","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 and 12.1.0.3 allows remote attackers to affect integrity via unknown vectors related to Storage Management.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5827","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Storage Management.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5826","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.3 and 6.3.1 allows remote attackers to affect availability via unknown vectors related to Install / Installation.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5825","description":"Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via vectors related to JAXP.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2013-5823","description":"Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-5822","description":"Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Learner Administration.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5820","description":"Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to JAX-WS.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-5816","description":"Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote attackers to affect availability via unknown vectors related to Metro.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5813","description":"Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1, 11.1.1.6.0, 11.1.1.7.0, and 11.1.1.8.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Content Server.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5804","description":"Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, and JRockit R27.7.6 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Javadoc.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-5801","description":"Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-5800","description":"Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JGSS.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-5799","description":"Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.2 allows remote attackers to affect integrity via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5798","description":"Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.2.0.0 and 11.1.2.1.0 allows remote attackers to affect integrity via unknown vectors related to End User Self Service.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5796","description":"Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via unknown vectors related to Web Services.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5794","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Portal, a different vulnerability than CVE-2013-5841.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5792","description":"Unspecified vulnerability in the Techstack component in Oracle E-Business Suite 12.1 allows remote attackers to affect confidentiality via unknown vectors related to Apache.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5790","description":"Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to BEANS.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-5784","description":"Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to SCRIPTING.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-5783","description":"Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Swing.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-5780","description":"Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-5779","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote authenticated users to affect confidentiality via vectors related to PIA Core Technology.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5778","description":"Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-5774","description":"Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-5773","description":"Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5.0 allows remote attackers to affect integrity via unknown vectors related to Servlet Runtime.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5769","description":"Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 allows remote authenticated users to affect availability via unknown vectors related to Web Services.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5768","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect integrity via unknown vectors related to ActiveX Controls.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5766","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 and 12.1.0.3 allows remote attackers to affect integrity via unknown vectors related to DB Performance Advisories/UIs.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5765","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect availability via vectors related to XML Publisher.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5761","description":"Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Integration - Scripting.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3841","description":"Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Web Services.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3840","description":"Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Services.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3835","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Integration Broker.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3833","description":"Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5.0 and 11.1.2.0.0 allows remote attackers to affect integrity via unknown vectors related to Authentication Engine.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3832","description":"Unspecified vulnerability in the Siebel Server Remote component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect integrity via unknown vectors related to File System Management.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3831","description":"Unspecified vulnerability in the Oracle Portal component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Demos.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3829","description":"Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-3828","description":"Unspecified vulnerability in the Oracle Web Services component in Oracle Fusion Middleware 10.1.3.5.0 and 11.1.1.6.0 allows remote attackers to affect confidentiality via unknown vectors related to Test Page.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3827","description":"Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.","exploit_maturity":"Working exploit published","published":"2013-10-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-3814","description":"Unspecified vulnerability in the Oracle Retail Invoice Matching component in Oracle Industry Applications 10.2, 11.0, 12.0, 12.0IN, 12.1, 13.0, 13.1, and 13.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to System Administration.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3785","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Career's Home.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3766","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.1, 8.2, and 8.3 allows remote authenticated users to affect integrity via unknown vectors related to Web Access.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3762","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2, 12.1.0.3, and 12.1.0.4 allows remote attackers to affect integrity via unknown vectors related to Schema Management.","exploit_maturity":"No public exploit","published":"2013-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-4330","description":"Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including \"$simple{}\" in a CamelFileName message header to a (1) FILE or (2) FTP producer.","exploit_maturity":"No public exploit","published":"2013-10-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-4210","description":"The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-10-01","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-5960","description":"The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0.1 does not properly resist tampering with serialized ciphertext, which makes it easier for remote attackers to bypass intended cryptographic protection mechanisms via an attack against the intended cipher mode in a non-default configuration, a different vulnerability than CVE-2013-5679.","exploit_maturity":"No public exploit","published":"2013-09-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-4378","description":"Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header.","exploit_maturity":"No public exploit","published":"2013-09-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-4372","description":"Multiple cross-site scripting (XSS) vulnerabilities in Fuse Management Console in Red Hat JBoss Fuse 6.0.0 before patch 3 and JBoss A-MQ 6.0.0 before patch 3 allow remote attackers to inject arbitrary web script or HTML via the (1) user field in the create user page or (2) profile version to the create profile page.","exploit_maturity":"No public exploit","published":"2013-09-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-4310","description":"Apache Struts 2.0.0 through 2.3.15.1 allows remote attackers to bypass access controls via a crafted action: prefix.","exploit_maturity":"No public exploit","published":"2013-09-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-4112","description":"The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.","exploit_maturity":"No public exploit","published":"2013-09-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-4053","description":"The WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly verify X.509 certificates, which allows remote attackers to obtain privileged access via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-09-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-4052","description":"Cross-site scripting (XSS) vulnerability in the UDDI Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-09-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0596","description":"Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-09-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-4766","description":"The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.","exploit_maturity":"No public exploit","published":"2013-09-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-2035","description":"Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.","exploit_maturity":"No public exploit","published":"2013-08-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-3029","description":"Cross-site request forgery (CSRF) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences.","exploit_maturity":"No public exploit","published":"2013-08-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2967","description":"Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-08-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2172","description":"jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak \"canonicalization algorithm to apply to the SignedInfo part of the Signature.\"","exploit_maturity":"No public exploit","published":"2013-08-20","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-2160","description":"The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via crafted XML with a large number of (1) elements, (2) attributes, (3) nested constructs, and possibly other vectors.","exploit_maturity":"Working exploit published","published":"2013-08-19","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2012-5575","description":"Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force CXF to use weaker cryptographic algorithms than intended and makes it easier to decrypt communications, aka \"XML Encryption backwards compatibility attack.\"","exploit_maturity":"No public exploit","published":"2013-08-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-4213","description":"Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client.","exploit_maturity":"No public exploit","published":"2013-08-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-4128","description":"Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote attackers to hijack sessions by using a remoting client.","exploit_maturity":"No public exploit","published":"2013-08-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-4600","description":"Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to system/workplace/views/admin/admin-main.jsp or the (2) requestedResource parameter to system/login/index.html.","exploit_maturity":"No public exploit","published":"2013-08-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-3300","description":"The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a \u003c (less than) character.","exploit_maturity":"No public exploit","published":"2013-07-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-1483","description":"wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterprise BRMS Platform 5.1.0; and JBoss Enterprise Web Platform 5.1.1 does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references, a similar issue to CVE-2003-1564.","exploit_maturity":"No public exploit","published":"2013-07-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-4883","description":"Multiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePO Extension for the McAfee Agent (MA) 4.5 through 4.6, allow remote attackers to inject arbitrary web script or HTML via the (1) instanceId parameter core/loadDisplayType.do; (2) instanceId or (3) monitorUrl parameter to console/createDashboardContainer.do; uid parameter to (4) ComputerMgmt/sysDetPanelBoolPie.do or (5) ComputerMgmt/sysDetPanelSummary.do; (6) uid, (7) orion.user.security.token, or (8) ajaxMode parameter to ComputerMgmt/sysDetPanelQry.do; or (9) uid, (10) orion.user.security.token, or (11) ajaxMode parameter to ComputerMgmt/sysDetPanelSummary.do.","exploit_maturity":"Working exploit published","published":"2013-07-22","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2013-4882","description":"Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to (1) core/showRegisteredTypeDetails.do and (2) EPOAGENTMETA/DisplayMSAPropsDetail.do, a different vulnerability than CVE-2013-0140.","exploit_maturity":"Working exploit published","published":"2013-07-22","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-2248","description":"Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a parameter using the (1) redirect: or (2) redirectAction: prefix.","exploit_maturity":"Working exploit published","published":"2013-07-20","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2013-1879","description":"Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the \"cron of a message.\"","exploit_maturity":"No public exploit","published":"2013-07-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-3825","description":"Unspecified vulnerability in the Oracle Agile Product Collaboration component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders \u0026 Files Attachment.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3824","description":"Unspecified vulnerability in the Oracle Agile Collaboration Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Manufacturing/Mfg Parts.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3823","description":"Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3822","description":"Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote attackers to affect integrity via unknown vectors related to Web Client (CS).","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3821","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality and availability via unknown vectors related to Integration Broker.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3820","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect availability via unknown vectors related to Business Interlink.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3819","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality and availability via unknown vectors related to Mobile Applications.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3818","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2013-2404.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3816","description":"Unspecified vulnerability in the Oracle Policy Automation component in Oracle Industry Applications 10.2.0, 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Determinations Engine.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3800","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Business Interlinks.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3791","description":"Unspecified vulnerability in Enterprise Manager (EM) Base Platform 10.2.0.5 and EM DB Control 11.1.0.7 in Oracle Enterprise Manager Grid Control allows remote attackers to affect integrity via unknown vectors related to User Interface Framework.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3788","description":"Unspecified vulnerability in the Oracle iSupplier Portal component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Supplier Management.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3784","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors Time and Labor.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3781","description":"Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7, 8.4.0, and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-3776.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3780","description":"Unspecified vulnerability in the PeopleSoft Enterprise Portal component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Saved Search.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3778","description":"Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Help.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3777","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Signon.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3776","description":"Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7, 8.4.0, and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-3781.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3775","description":"Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3772","description":"Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1, 11.1.1.6.0, and 11.1.1.7.0 allows remote attackers to affect integrity via unknown vectors related to Web Forms.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3770","description":"Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1, 11.1.1.6.0, and 11.1.1.7.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content Server. NOTE: the previous information is from the October 2013 CPU. Oracle has not commented on claims from a third party that the issue is related to \"iDoc script injection\" in the (1) cs and (2) urm components, which allows attackers to read \"sensitive\" files, as demonstrated by obtaining the \"AES encryption key and encrypted credentials\" of the weblogic user.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3769","description":"Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1, 11.1.1.6.0, and 11.1.1.7.0 allows remote attackers to affect integrity via unknown vectors related to Site Studio.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3768","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to Rich Text Editor.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3767","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite Access Gate 1.2.1 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3764","description":"Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2013-3763.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3763","description":"Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2013-3764.","exploit_maturity":"Working exploit published","published":"2013-07-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2013-3761","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products Portal 9.1 and PeopleTools 8.52 allows remote attackers to affect integrity via vectors related to PIA Core Technology.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3759","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect integrity via vectors related to PIA Search Functionality.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3758","description":"Unspecified vulnerability in the Enterprise Manager (EM) Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 and 12.1.0.3 in Oracle Enterprise Manager Grid Control allows remote attackers to affect integrity via unknown vectors related to Schema Management.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3756","description":"Unspecified vulnerability in the Oracle Landed Cost Management component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Shipment Workbench.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3755","description":"Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5.0 allows remote attackers to affect integrity via vectors related to SSO Engine.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3747","description":"Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Client System Analyzer.","exploit_maturity":"No public exploit","published":"2013-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2467","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 5.0 Update 45 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Java installer.","exploit_maturity":"No public exploit","published":"2013-06-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2458","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via \"an error related to method handles.\"","exploit_maturity":"No public exploit","published":"2013-06-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2457","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of \"certain class checks\" that allows remote attackers to bypass intended class restrictions.","exploit_maturity":"No public exploit","published":"2013-06-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-2456","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.","exploit_maturity":"No public exploit","published":"2013-06-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2455","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods.","exploit_maturity":"No public exploit","published":"2013-06-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2454","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.","exploit_maturity":"No public exploit","published":"2013-06-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2453","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to a missing check for \"package access\" by the MBeanServer Introspector.","exploit_maturity":"No public exploit","published":"2013-06-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2452","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"network address handling in virtual machine identifiers\" and the lack of \"unique and unpredictable IDs\" in the java.rmi.dgc.VMID class.","exploit_maturity":"No public exploit","published":"2013-06-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2450","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.","exploit_maturity":"No public exploit","published":"2013-06-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2449","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to GnomeFileTypeDetector and a missing check for read permissions for a path.","exploit_maturity":"No public exploit","published":"2013-06-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2447","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.","exploit_maturity":"No public exploit","published":"2013-06-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2446","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.","exploit_maturity":"No public exploit","published":"2013-06-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2444","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not \"properly manage and restrict certain resources related to the processing of fonts,\" possibly involving temporary files.","exploit_maturity":"No public exploit","published":"2013-06-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2443","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2452 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect \"checking order\" within the AccessControlContext class.","exploit_maturity":"No public exploit","published":"2013-06-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2412","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient indication of an SSL connection failure by JConsole, related to RMI connection dialog box.","exploit_maturity":"No public exploit","published":"2013-06-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-1571","description":"Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.","exploit_maturity":"Forecast only","published":"2013-06-18","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-1862","description":"mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator.","exploit_maturity":"No public exploit","published":"2013-06-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-0482","description":"IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 through 8.5.0.2 and WebSphere Message Broker 6.1, 7.0 through 7.0.0.5, and 8.0 through 8.0.0.2, when WS-Security is used, allows remote attackers to spoof the signatures of messages via a crafted SOAP message, related to a \"Signature Wrap attack,\" a different vulnerability than CVE-2011-1377 and CVE-2013-0489.","exploit_maturity":"No public exploit","published":"2013-05-29","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0141","description":"Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory.","exploit_maturity":"No public exploit","published":"2013-05-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-0565","description":"Cross-site scripting (XSS) vulnerability in the RPC adapter for the Web 2.0 and Mobile toolkit in IBM WebSphere Application Server (WAS) 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted response.","exploit_maturity":"No public exploit","published":"2013-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0544","description":"Directory traversal vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux and UNIX allows remote authenticated users to modify data via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-04-24","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2013-0542","description":"Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via crafted field values.","exploit_maturity":"No public exploit","published":"2013-04-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-3060","description":"The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests.","exploit_maturity":"No public exploit","published":"2013-04-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-6551","description":"The default configuration of Apache ActiveMQ before 5.8.0 enables a sample web application, which allows remote attackers to cause a denial of service (broker resource consumption) via HTTP requests.","exploit_maturity":"No public exploit","published":"2013-04-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-6092","description":"Multiple cross-site scripting (XSS) vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via (1) the refresh parameter to PortfolioPublishServlet.java (aka demo/portfolioPublish or Market Data Publisher), or vectors involving (2) debug logs or (3) subscribe messages in webapp/websocket/chat.js. NOTE: AMQ-4124 is covered by CVE-2012-6551.","exploit_maturity":"No public exploit","published":"2013-04-21","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-2441","description":"Unspecified vulnerability in the Agile EDM component in Oracle Supply Chain Products Suite 6.1.1.0, 6.1.2.0, and 6.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to Java Client.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2424","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"insufficient class access checks\" when \"creating new instances\" using MBeanInstantiator.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2419","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"font processing errors\" in the International Components for Unicode (ICU) Layout Engine before 51.2.","exploit_maturity":"Working exploit published","published":"2013-04-17","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2417","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to Networking. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an information leak involving InetAddress serialization. CVE has not investigated the apparent discrepancy between vendor reports regarding the impact of this issue.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-2413","description":"Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2411","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 7.0, 8.1, and 8.2 allows remote attackers to affect integrity via unknown vectors related to Web Access.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2410","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Absence Management.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2409","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality via vectors related to PIA Core Technology.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2408","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via vectors related to PIA Core Technology and use of Internet Explorer 6.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2405","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 7.0, 8.1, and 8.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Access.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2404","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2013-3818.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2402","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to WorkCenter.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2399","description":"Unspecified vulnerability in the Siebel Call Center component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Email - COMM Server Components.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2398","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Open UI Client.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2397","description":"Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Industry Applications 13.1, 13.2, 13.3, and 13.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Customer Operations (Add, Search).","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2396","description":"Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via vectors related to HTML OAM client.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2390","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2, 10.3.5, 10.3.6, and 12.1.1 allows remote attackers to affect integrity via unknown vectors related to WebLogic Console, a different vulnerability than CVE-2013-1504.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2388","description":"Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect availability via unknown vectors related to Mid Tier File Management.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2386","description":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0 allows remote authenticated users to affect integrity and availability via vectors related to BASE.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2385","description":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0 allows remote authenticated users to affect confidentiality via vectors related to BASE, a different vulnerability than CVE-2013-1560.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-2374","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote authenticated users to affect integrity via unknown vectors related to Rich Text Editor.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1568","description":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 5.3.3, 6.0.1, and 6.2.0 allows remote authenticated users to affect availability via unknown vectors related to CB.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1565","description":"Unspecified vulnerability in the Oracle GoldenGate Veridata component in Oracle Fusion Middleware 3.0.0.11 allows remote attackers to affect availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1562","description":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0 allows remote authenticated users to affect integrity via vectors related to HELP.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1559","description":"Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect availability via unknown vectors related to Content Server.","exploit_maturity":"Working exploit published","published":"2013-04-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2013-1553","description":"Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.6.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Services Security.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1551","description":"Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Integration Business Services.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1550","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect integrity via unknown vectors related to WorkCenter.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1545","description":"Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.5.0, and 11.1.1.6.0 allows remote attackers to affect availability via unknown vectors related to Web Listener.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1543","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Open UI Client.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1542","description":"Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via unknown vectors related to Servlet Runtime.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1536","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.05 and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1535","description":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0, 5.1.0, 5.2.0, 5.3.4, and 6.0.1 allows remote attackers to affect confidentiality via vectors related to BASE.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1533","description":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 3.1.0, 5.1.0, 5.2.0, 5.3.1 through 5.3.3, and 6.0.1 through 12.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BASE.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1529","description":"Unspecified vulnerability in the Oracle WebCenter Interaction component in Oracle Fusion Middleware 6.5.1 and 10.3.3.0 allows remote attackers to affect integrity via unknown vectors related to Image Service.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1528","description":"Unspecified vulnerability in the Oracle HRMS component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Payroll.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1527","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote authenticated users to affect confidentiality via unknown vectors related to Report Distribution.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1525","description":"Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Industry Applications 13.0, 13.1, and 13.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Retail Integration Bus Manager.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1524","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Attachments.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1522","description":"Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote attackers to affect integrity via unknown vectors related to Content Server.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1520","description":"Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0 and 4.6.6 allows remote authenticated users to affect confidentiality and integrity via vectors related to HTML Surround.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1516","description":"Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1514","description":"Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote authenticated users to affect integrity via vectors related to RMI Support.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1513","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via vectors related to PIA Core Technology.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1510","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Portal Framework, a different vulnerability than CVE-2015-0419.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1509","description":"Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.0, and 11.1.1.6.1 allows remote authenticated users to affect integrity via unknown vectors related to WebCenter Sites.","exploit_maturity":"Working exploit published","published":"2013-04-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2013-1505","description":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 3.1.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BASE.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1504","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2, 10.3.5, 10.3.6, and 12.1.1 allows remote attackers to affect integrity via unknown vectors related to WebLogic Console, a different vulnerability than CVE-2013-2390.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1501","description":"Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Login.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-1497","description":"Unspecified vulnerability in the Oracle COREid Access component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to WebGate - WebServer plugin.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0416","description":"Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Services, a different vulnerability than CVE-2013-2403.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0410","description":"Unspecified vulnerability in the Agile EDM component in Oracle Supply Chain Products Suite 6.1.1.0, 6.1.2.0, and 6.1.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Base Component - Common Objects.","exploit_maturity":"No public exploit","published":"2013-04-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0315","description":"The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitrary files via a crafted external XML entity in an XML document, aka an XML Entity Expansion (XEE) attack.","exploit_maturity":"No public exploit","published":"2013-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-3532","description":"Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","exploit_maturity":"No public exploit","published":"2013-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-1821","description":"lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack.","exploit_maturity":"No public exploit","published":"2013-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-0331","description":"Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to cause a denial of service via a crafted payload.","exploit_maturity":"No public exploit","published":"2013-03-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-0330","description":"Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to build arbitrary jobs via unknown attack vectors.","exploit_maturity":"No public exploit","published":"2013-03-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-0328","description":"Cross-site scripting (XSS) vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-03-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-0327","description":"Cross-site request forgery (CSRF) vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors.","exploit_maturity":"No public exploit","published":"2013-03-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-1814","description":"The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field of a response.","exploit_maturity":"Working exploit published","published":"2013-03-14","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2012-4446","description":"The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact via an AMQP request.","exploit_maturity":"No public exploit","published":"2013-03-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-0239","description":"Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request containing a UsernameToken element that lacks a password child element.","exploit_maturity":"No public exploit","published":"2013-03-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-5633","description":"The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.","exploit_maturity":"No public exploit","published":"2013-03-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-6073","description":"Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-02-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-6072","description":"CRLF injection vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-02-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-1485","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2013-02-20","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-1624","description":"The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.","exploit_maturity":"No public exploit","published":"2013-02-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-1620","description":"The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.","exploit_maturity":"No public exploit","published":"2013-02-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5478","description":"The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-02-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3370","description":"The SecurityAssociation.getCredential method in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 returns the credentials of the previous user when a security context is not provided, which allows remote attackers to gain privileges as other users.","exploit_maturity":"No public exploit","published":"2013-02-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3369","description":"The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to gain privileges of the previous user via a null password, which causes the previous user's password to be used.","exploit_maturity":"No public exploit","published":"2013-02-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-4575","description":"Cross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-02-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2013-0448","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 allows remote attackers to affect integrity via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2013-02-02","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-0435","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper restriction of com.sun.xml.internal packages and \"Better handling of UI elements.\"","exploit_maturity":"No public exploit","published":"2013-02-02","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-0434","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAXP. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the public declaration of the loadPropertyFile method in the JAXP FuncSystemProperty class, which allows remote attackers to obtain sensitive information.","exploit_maturity":"No public exploit","published":"2013-02-02","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-0433","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Networking. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to avoid triggering an exception during the deserialization of invalid InetSocketAddress data.","exploit_maturity":"No public exploit","published":"2013-02-02","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-0432","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality and integrity via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"insufficient clipboard access premission checks.\"","exploit_maturity":"No public exploit","published":"2013-02-02","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-0430","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process of the client.","exploit_maturity":"No public exploit","published":"2013-02-02","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-0427","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Libraries. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to interrupt certain threads that should not be interrupted.","exploit_maturity":"No public exploit","published":"2013-02-02","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-0424","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to RMI. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to cross-site scripting (XSS) in the sun.rmi.transport.proxy CGIHandler class that does not properly handle error messages in a (1) command or (2) port number.","exploit_maturity":"No public exploit","published":"2013-02-02","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-0409","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect confidentiality via vectors related to JMX.","exploit_maturity":"No public exploit","published":"2013-02-02","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2013-1490","description":"Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.0_11-b21) allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors, aka \"Issue 51,\" a different vulnerability than CVE-2013-0431. NOTE: as of 20130130, this vulnerability does not contain any independently-verifiable details, and there is no vendor acknowledgement. A CVE identifier is being assigned because this vulnerability has received significant public attention, and the original researcher has an established history of releasing vulnerability reports that have been fixed by vendors. NOTE: this issue also exists in SE 6, but it cannot be exploited without a separate vulnerability.","exploit_maturity":"No public exploit","published":"2013-01-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0431","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka \"Issue 52,\" a different vulnerability than CVE-2013-1490.","exploit_maturity":"Exploited in the wild","published":"2013-01-31","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2013-0461","description":"Cross-site scripting (XSS) vulnerability in the virtual member manager (VMM) administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.27, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0460","description":"Cross-site request forgery (CSRF) vulnerability in the portlet subsystem in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47 and 7.0 before 7.0.0.27 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences.","exploit_maturity":"No public exploit","published":"2013-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0459","description":"Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.27, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0458","description":"Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.27, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2, when login security is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5531","description":"Multiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal in JBoss Enterprise Portal Platform 5.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2013-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0397","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Diagnostics.","exploit_maturity":"Working exploit published","published":"2013-01-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2013-0396","description":"Unspecified vulnerability in the Application Performance Management (APM) component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than CVE-2013-0360.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0395","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated users to affect integrity via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0394","description":"Unspecified vulnerability in the PeopleSoft HRMS component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote attackers to affect confidentiality via unknown vectors related to Candidate Gateway.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0393","description":"Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0418.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0392","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2012-5059.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0391","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.52 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0388","description":"Unspecified vulnerability in the PeopleSoft HRMS component in Oracle PeopleSoft Products 9.1 allows remote attackers to affect integrity via unknown vectors related to Mobile Company Directory.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0387","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to PeopleCode.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0382","description":"Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Campaign Management.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0381","description":"Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Application Framework.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0380","description":"Unspecified vulnerability in the Oracle Payroll component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to View Payslip.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0379","description":"Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Siebel Calendar, a different vulnerability than CVE-2013-0378.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0378","description":"Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Siebel Calendar, a different vulnerability than CVE-2013-0379.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0377","description":"Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Client System Analyzer.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0376","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Diagnostics.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0374","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Database Cloning.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0373","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Distributed/Cross DB Features.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0372","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1 and 12.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Distributed/Cross DB Features.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0369","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Query.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0365","description":"Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0360","description":"Unspecified vulnerability in the Application Performance Management (APM) component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than CVE-2013-0396.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0358","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Resource Manager.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0357","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.52 allows remote attackers to affect integrity, related to PIA Core Technology.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0356","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote attackers to affect integrity, related to PIA Core Technology.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0355","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1, and EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3, allows remote attackers to affect integrity via unknown vectors related to Distributed/Cross DB Features.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0354","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5, and EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3, allows remote attackers to affect integrity via unknown vectors related to Policy Framework.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0353","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 allows remote attackers to affect integrity via unknown vectors related to Enterprise Configuration Management.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2013-0352","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Content Management.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5097","description":"Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 10.1.4.3.0, 11.1.1.5.0, and 11.1.2.0.0 allows remote attackers to affect integrity, related to OAM Webgate.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5062","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to affect integrity via unknown vectors related to User Interface Framework.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5059","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2013-0392.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3219","description":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Storage Management.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3218","description":"Unspecified vulnerability in the Human Resources component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Security Groups.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3190","description":"Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity, related to UWQ Server Issues.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3172","description":"Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect availability via unknown vectors related to Siebel Apps - Multi-channel Technologies.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3170","description":"Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via unknown vectors related to Siebel Core - Server Infrastructure, a different vulnerability than CVE-2012-3169.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3169","description":"Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via unknown vectors related to Siebel Core - Server Infrastructure, a different vulnerability than CVE-2012-3170.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3168","description":"Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect availability via unknown vectors related to Siebel Core - Server Infrastructure.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1755","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 allows remote attackers to affect integrity via vectors related to PeopleBooks - PSOL.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1701","description":"Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Highly Interactive Web UI.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1700","description":"Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Siebel UI Framework.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1680","description":"Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Siebel Apps - Multi-channel Technologies.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1677","description":"Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2013-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-4550","description":"A flaw was found in JBoss Enterprise Application Platform. When role-based authorization is used for Enterprise Java Beans (EJB) access, the system does not correctly call the necessary authorization modules. This prevents Java Authorization Contract for Containers (JACC) permissions from being applied, allowing remote attackers to gain unauthorized access to EJBs.","exploit_maturity":"No public exploit","published":"2013-01-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-4549","description":"A flaw was found in JBoss Enterprise Application Platform. The `processInvocation` function within the `org.jboss.as.ejb3.security.AuthorizationInterceptor` component incorrectly authorizes all requests when no roles are defined for an Enterprise Java Beans (EJB) method invocation. This allows attackers to bypass intended access restrictions for EJB methods, leading to unauthorized access to sensitive functionalities.","exploit_maturity":"No public exploit","published":"2013-01-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-2378","description":"Apache CXF 2.4.5 through 2.4.7, 2.5.1 through 2.5.3, and 2.6.x before 2.6.1, does not properly enforce child policies of a WS-SecurityPolicy 1.1 SupportingToken policy on the client side, which allows remote attackers to bypass the (1) AlgorithmSuite, (2) SignedParts, (3) SignedElements, (4) EncryptedParts, and (5) EncryptedElements policies.","exploit_maturity":"No public exploit","published":"2013-01-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-3133","description":"Buffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2, Essbase Server 11.1.2.1 and 11.1.2.2, Production Reporting Server 11.1.2.1 and 11.1.2.2, and Integration Services Server 11.1.2.1 and 11.1.2.2 has unknown impact and attack vectors.","exploit_maturity":"No public exploit","published":"2012-12-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3428","description":"The IronJacamar container before 1.0.12.Final for JBoss Application Server, when allow-multiple-users is enabled in conjunction with a security domain, does not use the credentials supplied in a getConnection function call, which allows remote attackers to obtain access to an arbitrary datasource connection in opportunistic circumstances via an invalid connection attempt.","exploit_maturity":"No public exploit","published":"2012-12-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-4431","description":"org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier.","exploit_maturity":"No public exploit","published":"2012-12-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-3546","description":"org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.","exploit_maturity":"No public exploit","published":"2012-12-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-5055","description":"DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password if the user is not found, which makes the response delay shorter and might allow remote attackers to enumerate valid usernames via a series of login requests.","exploit_maturity":"No public exploit","published":"2012-12-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-2732","description":"CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter.","exploit_maturity":"Working exploit published","published":"2012-12-05","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2011-2731","description":"Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread.","exploit_maturity":"No public exploit","published":"2012-12-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-5568","description":"Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.","exploit_maturity":"No public exploit","published":"2012-11-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-5373","description":"Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm, a different vulnerability than CVE-2012-2739.","exploit_maturity":"No public exploit","published":"2012-11-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-5370","description":"JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash2 algorithm, a different vulnerability than CVE-2011-4838.","exploit_maturity":"No public exploit","published":"2012-11-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-2739","description":"Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.","exploit_maturity":"No public exploit","published":"2012-11-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-1167","description":"The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before 5.1.2, BRMS Platform before 5.3.0, and SOA Platform before 5.3.0, when the server is configured to use the JaccAuthorizationRealm and the ignoreBaseDecision property is set to true on the JBossWebRealm, does not properly check the permissions created by the WebPermissionMapping class, which allows remote authenticated users to access arbitrary applications.","exploit_maturity":"No public exploit","published":"2012-11-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-0818","description":"RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.","exploit_maturity":"No public exploit","published":"2012-11-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2011-5245","description":"The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, aka an XML external entity (XXE) injection attack, a similar vulnerability to CVE-2012-0818.","exploit_maturity":"No public exploit","published":"2012-11-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2011-4085","description":"The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.","exploit_maturity":"No public exploit","published":"2012-11-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-2908","description":"Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that perform operations on MBeans and possibly execute arbitrary code via unspecified vectors.","exploit_maturity":"No public exploit","published":"2012-11-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-1096","description":"The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss Enterprise Portal Platform before 5.2.2 and other products, when using block ciphers in cipher-block chaining (CBC) mode, allows remote attackers to obtain plaintext data via a chosen-ciphertext attack on SOAP responses, aka \"character encoding pattern attack.\"","exploit_maturity":"No public exploit","published":"2012-11-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-1330","description":"The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.","exploit_maturity":"No public exploit","published":"2012-11-23","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-5887","description":"The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.","exploit_maturity":"No public exploit","published":"2012-11-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-5886","description":"The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.","exploit_maturity":"No public exploit","published":"2012-11-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-5885","description":"The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, a different vulnerability than CVE-2011-1184.","exploit_maturity":"No public exploit","published":"2012-11-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-2733","description":"java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.","exploit_maturity":"No public exploit","published":"2012-11-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-4853","description":"Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Application Server 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger information disclosure.","exploit_maturity":"No public exploit","published":"2012-11-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-4851","description":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.","exploit_maturity":"No public exploit","published":"2012-11-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3330","description":"The proxy server in IBM WebSphere Application Server 7.0 before 7.0.0.27, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, and WebSphere Virtual Enterprise, allows remote attackers to cause a denial of service (daemon outage) via a crafted request.","exploit_maturity":"No public exploit","published":"2012-11-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5786","description":"The wsdl_first_https sample code in distribution/src/main/release/samples/wsdl_first_https/src/main/ in Apache CXF before 2.7.0 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. NOTE: The vendor states that the sample had specifically used a flag to bypass the DN check","exploit_maturity":"No public exploit","published":"2012-11-04","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5785","description":"Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.","exploit_maturity":"No public exploit","published":"2012-11-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-5784","description":"Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.","exploit_maturity":"No public exploit","published":"2012-11-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-5783","description":"Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.","exploit_maturity":"No public exploit","published":"2012-11-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2012-1154","description":"mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when \"ROOT\" is set to excludedContexts, exposes the root context of the server, which allows remote attackers to bypass access restrictions and gain access to applications deployed on the root context via unspecified vectors.","exploit_maturity":"No public exploit","published":"2012-10-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-5094","description":"Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect confidentiality via unknown vectors related to User Group Management.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5093","description":"Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect integrity via unknown vectors related to Global Spec Management.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5091","description":"Unspecified vulnerability in the Oracle Agile Product Supplier Collaboration for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect confidentiality via unknown vectors related to Supplier Portal.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5090","description":"Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Document Reference Library.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5066","description":"Unspecified vulnerability in the Oracle Central Designer component in Oracle Industry Applications 1.3, 1.4, and 1.4.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5063","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0, 10.0.2, 10.1.0, 10.2.0, 10.2.2, 10.3.0, 10.5.0, 11.0.0 through 11.4.0, and 12.0.0 allows remote attackers to affect integrity, related to BASE.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5061","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0, 10.0.2, 10.1.0, 10.2.0, 10.2.2, 10.3.0, 10.5.0, 11.0.0 through 11.4.0, and 12.0.0 allows remote authenticated users to affect confidentiality, related to BASE.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5058","description":"Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to the Web interface.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3230","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Portal Framework.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3229","description":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Siebel Documentation.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3228","description":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.0.5, 5.1.0, 5.2.0, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect integrity and availability, related to BASE.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3226","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0, 10.0.2, 10.1.0, 10.2.0, 10.2.2, 10.3.0, 10.5.0, 11.0.0 through 11.4.0, and 12.0.0 allows remote authenticated users to affect confidentiality and integrity, related to BASE.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3222","description":"Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect availability via unknown vectors related to Signon.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3201","description":"Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Self-Service (Student Records).","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3200","description":"Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.1 allows remote authenticated users to affect confidentiality, related to ROLESPRV.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3198","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated users to affect availability via unknown vectors related to Query.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3196","description":"Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and availability, related to PDF generation.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3195","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3194","description":"Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.4.2, 11.1.1.5.0, 11.1.1.6.0, and 11.1.1.6.2 allows remote attackers to affect integrity via unknown vectors related to Administration.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3186","description":"Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Advanced UI, a different vulnerability than CVE-2012-3183 and CVE-2012-3185.","exploit_maturity":"Working exploit published","published":"2012-10-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2012-3185","description":"Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Advanced UI, a different vulnerability than CVE-2012-3183 and CVE-2012-3186.","exploit_maturity":"Working exploit published","published":"2012-10-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2012-3184","description":"Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote attackers to affect integrity via unknown vectors related to Advanced UI.","exploit_maturity":"Working exploit published","published":"2012-10-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2012-3183","description":"Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Advanced UI, a different vulnerability than CVE-2012-3185 and CVE-2012-3186.","exploit_maturity":"Working exploit published","published":"2012-10-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2012-3182","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 allows remote attackers to affect integrity, related to PIA Core Technology.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3181","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect availability via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3175","description":"Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-0518.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3171","description":"Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Autoconfig Templates.","exploit_maturity":"No public exploit","published":"2012-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5079","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries, a different vulnerability than CVE-2012-5073.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2012-5075","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, related to JMX.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2012-5074","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality and integrity, related to JAX-WS.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2012-5073","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries, a different vulnerability than CVE-2012-5079.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2012-5072","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2012-5071","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality and integrity, related to JMX.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2012-5070","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, related to JMX.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2012-5069","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Concurrency.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2012-4416","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Hotspot.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2012-3161","description":"Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.1 allows remote attackers to affect integrity via unknown vectors related to Web Client (CS).","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3155","description":"Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1 and 8.2 allows remote attackers to affect availability, related to CORBA ORB.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3154","description":"Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.0 allows remote authenticated users to affect confidentiality, related to ATTACH.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3153","description":"Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet. NOTE: the previous information is from the October 2012 CPU. Oracle has not commented on claims from the original researcher that the PARSEQUERY function allows remote attackers to obtain database credentials via reports/rwservlet/parsequery, and that this issue occurs in earlier versions. NOTE: this can be leveraged with CVE-2012-3152 to execute arbitrary code by uploading a .jsp file.","exploit_maturity":"Working exploit published","published":"2012-10-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2012-3141","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0, 10.0.2, 10.1.0, 10.2.0, 10.2.2, 10.3.0, 10.5.0, and 11.0.0 through 11.2.0 allows remote authenticated users to affect integrity, related to BASE, a different vulnerability than CVE-2012-3227.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3140","description":"Unspecified vulnerability in the Oracle Agile PLM For Process component in Oracle Supply Chain Products Suite 6.0.0.6.3 and 6.1.0.1.14 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Supply Chain Relationship Management.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3139","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity, related to Signon (local and SSO).","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3138","description":"Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Web interface.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1763","description":"Unspecified vulnerability in the Oracle Clinical/Remote Data Capture component in Oracle Industry Applications 4.6.0 and 4.6.2 allows remote authenticated users to affect confidentiality, related to HTML Surround.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1686","description":"Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.6 and other versions allows remote attackers to affect integrity via unknown vectors related to Installation.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0518","description":"Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.","exploit_maturity":"Exploited in the wild","published":"2012-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0107","description":"Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote attackers to affect availability via unknown vectors related to Web.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0106","description":"Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0093","description":"Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote attackers to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0071.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0071","description":"Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote attackers to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0093.","exploit_maturity":"No public exploit","published":"2012-10-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-5351","description":"Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a \"Signature exclusion attack,\" a different vulnerability than CVE-2012-4418.","exploit_maturity":"No public exploit","published":"2012-10-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-4418","description":"Apache Axis2 allows remote attackers to forge messages and bypass authentication via an \"XML Signature wrapping attack.\"","exploit_maturity":"No public exploit","published":"2012-10-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-3306","description":"IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, when multi-domain support is configured, does not purge password data from the authentication cache, which has unspecified impact and remote attack vectors.","exploit_maturity":"No public exploit","published":"2012-09-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3305","description":"Directory traversal vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to overwrite arbitrary files via a crafted application file.","exploit_maturity":"No public exploit","published":"2012-09-25","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2012-3304","description":"The Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack sessions via unspecified vectors.","exploit_maturity":"No public exploit","published":"2012-09-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3451","description":"Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body.","exploit_maturity":"No public exploit","published":"2012-09-24","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-4387","description":"Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service (CPU consumption) via a long parameter name, which is processed as an OGNL expression.","exploit_maturity":"No public exploit","published":"2012-09-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-4386","description":"The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks by setting the token name configuration parameter to a session attribute.","exploit_maturity":"No public exploit","published":"2012-09-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-3325","description":"IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Full Profile before 8.5.0.1, when the PM44303 fix is installed, does not properly validate credentials, which allows remote authenticated users to obtain administrative access via unspecified vectors.","exploit_maturity":"No public exploit","published":"2012-08-30","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3467","description":"Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.","exploit_maturity":"No public exploit","published":"2012-08-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-4594","description":"McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information from arbitrary reporting panels, via a modified ID value in a console URL.","exploit_maturity":"No public exploit","published":"2012-08-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3293","description":"Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a cross-frame scripting (XFS) issue.","exploit_maturity":"No public exploit","published":"2012-08-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-2190","description":"IBM Global Security Kit (aka GSKit), as used in IBM HTTP Server in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1, allows remote attackers to cause a denial of service (daemon crash) via a crafted ClientHello message in the TLS Handshake Protocol.","exploit_maturity":"No public exploit","published":"2012-08-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0213","description":"The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.","exploit_maturity":"No public exploit","published":"2012-08-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-3119","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0.20 allows remote authenticated users to affect confidentiality via unknown vectors related to Candidate Gateway.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3118","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 allows remote authenticated users to affect confidentiality, related to PANPROC.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3117","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to HTTP.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3114","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-3113","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0.20 allows remote authenticated users to affect confidentiality and integrity, related to EPERF.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1761","description":"Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to UI Framework.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1760","description":"Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via unknown vectors related to UI Framework, a different vulnerability than CVE-2012-1742.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1759","description":"Unspecified vulnerability in the Oracle AutoVue component in Oracle Supply Chain Products Suite 20.0.2 and 20.1 allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-1758.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1758","description":"Unspecified vulnerability in the Oracle AutoVue component in Oracle Supply Chain Products Suite 20.0.2 and 20.1 allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-1759.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1754","description":"Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework, a different vulnerability than CVE-2012-1732.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1753","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to PC.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1748","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Candidate Gateway, a different vulnerability than CVE-2012-0562.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1742","description":"Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via unknown vectors related to UI Framework, a different vulnerability than CVE-2012-1760.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1741","description":"Unspecified vulnerability in the Enterprise Manager for Fusion Middleware component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to User Administration Pages.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1732","description":"Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework, a different vulnerability than CVE-2012-1754.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1731","description":"Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1730","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Password Management.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1729","description":"Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.1.3 and earlier allows remote attackers to affect integrity via unknown vectors related to UI and Visualization.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1728","description":"Unspecified vulnerability in the Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Portal Framework.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1715","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity, related to HTML Pages.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3562","description":"Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2012-07-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-2138","description":"The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP request.","exploit_maturity":"Working exploit published","published":"2012-07-09","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2012-2170","description":"The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote attackers to obtain sensitive client and request information via a direct request.","exploit_maturity":"No public exploit","published":"2012-06-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0720","description":"Cross-site scripting (XSS) vulnerability in the Integration Solution Console in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.","exploit_maturity":"No public exploit","published":"2012-06-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0716","description":"Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2012-06-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1726","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.","exploit_maturity":"No public exploit","published":"2012-06-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2012-1724","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect availability, related to JAXP.","exploit_maturity":"No public exploit","published":"2012-06-16","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2012-1719","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect integrity, related to CORBA.","exploit_maturity":"No public exploit","published":"2012-06-16","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2012-1718","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect availability via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2012-06-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1826","description":"dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template.","exploit_maturity":"No public exploit","published":"2012-06-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-1707","description":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core-Base, a different vulnerability than CVE-2012-1704.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1706","description":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Logging.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1695","description":"Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.2 and earlier, and JDK/JRE 5 and 6 27.7.1 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1674","description":"Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-0582.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0582","description":"Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-1674.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0581","description":"Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity, related to SCRM - Company Profiles.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0580","description":"Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity via unknown vectors related to Supplier Portal.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0576","description":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 6.0.1 and 6.2.0 allows remote authenticated users to affect integrity via unknown vectors related to Core-Help.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0575","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Core.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0573","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.4.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Core.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0571","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.4.0 allows remote authenticated users to affect integrity via unknown vectors related to Core, a different vulnerability than CVE-2012-0544.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0567","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.2.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Core, a different vulnerability than CVE-2012-0545 and CVE-2012-0546.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0566","description":"Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity via unknown vectors related to Supplier Portal.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0565","description":"Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Install.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0564","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50 and 8.51 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Query.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0562","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Candidate Gateway, a different vulnerability than CVE-2012-1748.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0560","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote attackers to affect integrity via unknown vectors related to Portal.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0559","description":"Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Billing.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0558","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 6.2.1, 8.0, 8.1, and 8.2 allows remote attackers to affect integrity via unknown vectors related to Web application.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0551","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.","exploit_maturity":"Working exploit published","published":"2012-05-03","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2012-0543","description":"Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 10.1.3.4.1 and 10.1.3.4.2 allows remote attackers to affect integrity via unknown vectors related to Administration.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0538","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Search.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0537","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity, related to HTML pages.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0536","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 through Bundle #26 allows remote authenticated users to affect confidentiality via unknown vectors related to eCompensation.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0535","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Change Password Page.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0533","description":"Unspecified vulnerability in the PeopleSoft Enterprise FCSM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Receivables.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0532","description":"Unspecified vulnerability in the Identity Manager component in Oracle Fusion Middleware 11.1.1.3 and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to User Config Management.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0530","description":"Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect integrity via unknown vectors related to eProcurement.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0522","description":"Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via unknown vectors related to Java Business Objects.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0521","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 Bundle #9 allows remote authenticated users to affect confidentiality via unknown vectors related to Human Resources.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0517","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to eCompensation Manager Desktop.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0515","description":"Unspecified vulnerability in the Identity Manager Connector component in Oracle Fusion Middleware 9.1.0.4 allows remote authenticated users to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0514","description":"Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality, related to SEC.","exploit_maturity":"No public exploit","published":"2012-05-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-2162","description":"The Web Server Plug-in in IBM WebSphere Application Server (WAS) 8.0 and earlier uses unencrypted HTTP communication after expiration of the plugin-key.kdb password, which allows remote attackers to obtain sensitive information by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack.","exploit_maturity":"No public exploit","published":"2012-05-01","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1574","description":"The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to impersonate arbitrary cluster user accounts via unspecified vectors.","exploit_maturity":"No public exploit","published":"2012-04-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-0325","description":"Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0324.","exploit_maturity":"No public exploit","published":"2012-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-0324","description":"Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0325.","exploit_maturity":"No public exploit","published":"2012-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-0707","description":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Lombardi Edition 7.2 allows remote attackers to inject arbitrary web script or HTML via crafted text input to a coach that is configured with a document attachment control section.","exploit_maturity":"No public exploit","published":"2012-02-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0506","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors related to CORBA.","exploit_maturity":"No public exploit","published":"2012-02-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2012-0502","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and availability, related to AWT.","exploit_maturity":"No public exploit","published":"2012-02-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2012-0501","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2012-02-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3563","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Sound.","exploit_maturity":"No public exploit","published":"2012-02-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-1007","description":"Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter to struts-examples/upload/upload-submit.do, or the message parameter to (2) struts-cookbook/processSimple.do or (3) struts-cookbook/processDyna.do.","exploit_maturity":"Working exploit published","published":"2012-02-07","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2012-1006","description":"Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to struts2-showcase/person/editPerson.action, or the (3) clientName parameter to struts2-rest-showcase/orders.","exploit_maturity":"Working exploit published","published":"2012-02-07","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2011-4314","description":"message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, which allows remote attackers to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack.","exploit_maturity":"No public exploit","published":"2012-01-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-0193","description":"IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8.0.0.3 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.","exploit_maturity":"No public exploit","published":"2012-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0022","description":"Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.","exploit_maturity":"No public exploit","published":"2012-01-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-3375","description":"Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by reading TCP data.","exploit_maturity":"No public exploit","published":"2012-01-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-1376","description":"iscdeploy in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.43, 7.0 before 7.0.0.21, and 8.0 before 8.0.0.2 on the IBM i platform sets weak permissions under systemapps/isclite.ear/ and bin/client_ffdc/, which allows local users to read or modify files via standard filesystem operations.","exploit_maturity":"No public exploit","published":"2012-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0110","description":"Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect confidentiality, integrity, and availability, related to Outside In Image Export SDK.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0089","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to ePerformance.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0088","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Benefits Administration.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0085","description":"Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2 and 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0083","description":"Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Search.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0080","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Management.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0078","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.2 and 12.1.3 allows remote authenticated users to affect confidentiality, related to REST Services (Menu, LOV).","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0076","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to ePerformance.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0074","description":"Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect integrity via unknown vectors related to Sales.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2012-0073","description":"Unspecified vulnerability in the Oracle Forms component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3573","description":"Unspecified vulnerability in Oracle Communications Unified 7.0 allows remote authenticated users to affect availability via unknown vectors related to Calendar Server.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3569","description":"Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality via unknown vectors related to Web Services Security.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3568","description":"Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services Security.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3566","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote attackers to affect availability via unknown vectors related to Web Container.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3565","description":"Unspecified vulnerability in Oracle Communications Unified 7.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Calendar Server.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3531","description":"Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect availability via unknown vectors related to Web Services Security.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3524","description":"Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3509.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3514","description":"Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastructure SEC (JDENET).","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3509","description":"Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3524.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2326","description":"Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-3509, and CVE-2011-3524.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2325","description":"Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2326, CVE-2011-3509, and CVE-2011-3524.","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2324","description":"Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote attackers to affect availability, related to Enterprise Infrastructure SEC (JDENET).","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2321","description":"Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDNET).","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2317","description":"Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastucture SEC (JDNET).","exploit_maturity":"No public exploit","published":"2012-01-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-5065","description":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 allows remote attackers to inject arbitrary web script or HTML via vectors related to web messaging.","exploit_maturity":"No public exploit","published":"2012-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1362","description":"Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 and 7.0 before 7.0.0.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1308.","exploit_maturity":"No public exploit","published":"2012-01-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-5064","description":"DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging knowledge of this string, a different vulnerability than CVE-2011-1184.","exploit_maturity":"No public exploit","published":"2012-01-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-5063","description":"The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weaker authentication or authorization requirements, a different vulnerability than CVE-2011-1184.","exploit_maturity":"No public exploit","published":"2012-01-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-5062","description":"The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability than CVE-2011-1184.","exploit_maturity":"No public exploit","published":"2012-01-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-1184","description":"The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, related to lack of checking of nonce (aka server nonce) and nc (aka nonce-count or client nonce count) values.","exploit_maturity":"No public exploit","published":"2012-01-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2012-0393","description":"The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object.","exploit_maturity":"Working exploit published","published":"2012-01-08","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2012-0392","description":"The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method.","exploit_maturity":"Working exploit published","published":"2012-01-08","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2011-5057","description":"Apache Struts 2.3.1.2 and earlier, 2.3.19-2.3.23, provides interfaces that do not properly restrict access to collections such as the session and request collections, which might allow remote attackers to modify run-time data values via a crafted parameter to an application that implements an affected interface, as demonstrated by the SessionAware, RequestAware, ApplicationAware, ServletRequestAware, ServletResponseAware, and ParameterAware interfaces. NOTE: the vendor disputes the significance of this report because of an \"easy work-around in existing apps by configuring the interceptor.\"","exploit_maturity":"Working exploit published","published":"2012-01-08","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2011-3206","description":"Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in RHQ 4.2.0, as used in JBoss Operations Network (aka JON or JBoss ON) before 3.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2012-01-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-4905","description":"Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.","exploit_maturity":"No public exploit","published":"2012-01-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-4858","description":"Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.","exploit_maturity":"Working exploit published","published":"2012-01-05","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2011-5036","description":"Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.","exploit_maturity":"No public exploit","published":"2011-12-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-4461","description":"Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.","exploit_maturity":"No public exploit","published":"2011-12-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-3376","description":"org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which allows local users to gain privileges by using an untrusted web application to access the Manager application's functionality.","exploit_maturity":"No public exploit","published":"2011-11-11","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-2748","description":"Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2011-10-30","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-2747","description":"The Java Naming and Directory Interface (JNDI) implementation in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via a crafted method call.","exploit_maturity":"No public exploit","published":"2011-10-30","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1368","description":"The JavaServer Faces (JSF) application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors.","exploit_maturity":"No public exploit","published":"2011-10-29","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3560","description":"Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity, related to JSSE.","exploit_maturity":"No public exploit","published":"2011-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2011-3558","description":"Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to HotSpot.","exploit_maturity":"No public exploit","published":"2011-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2011-3557","description":"Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3556.","exploit_maturity":"No public exploit","published":"2011-10-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-3555","description":"Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, and 7 allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2011-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2011-3547","description":"Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Networking.","exploit_maturity":"No public exploit","published":"2011-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2011-3533","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect confidentiality and integrity, related to Job Profile Manager (JPM).","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3532","description":"Unspecified vulnerability in the Oracle Agile Product Supplier Collaboration for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0.2, 6.0.0.3, and 6.0.0.4 allows remote attackers to affect confidentiality via unknown vectors related to Supplier Portal.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3530","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect confidentiality via unknown vectors related to eDevelopment.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3529","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Talent Acquisition Manager.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3528","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to eProfile.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3527","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Candidate Gateway.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3526","description":"Unspecified vulnerability in the Siebel Core - UIF Server component in Oracle Siebel CRM 8.0.0 and 8.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to User Interface.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3518","description":"Unspecified vulnerability in the Siebel Core - UIF Client component in Oracle Siebel CRM 8.0.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to User Interface.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3513","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity, related to HTML Pages.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-3510","description":"Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.3.0 and 11.1.1.5.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to BI Platform Security.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2323","description":"Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2320","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2319","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality, related to JMS.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2316","description":"Unspecified vulnerability in the Siebel Apps - Marketing component in Oracle Siebel CRM 8.0.0 allows remote attackers to affect integrity via unknown vectors related to Email Marketing.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2315","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49, 8.50, and 8.51 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2314","description":"Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors related to JavaServer Pages.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2309","description":"Unspecified vulnerability in the Health Sciences - Oracle Clinical, Remote Data Capture component in Oracle Industry Applications 4.6 and 4.6.2 allows remote attackers to affect integrity, related to RDC Help.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2308","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Online Help.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2302","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Single Sign On.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2255","description":"Unspecified vulnerability in the Oracle WebLogic Portal component in Oracle Fusion Middleware 9.2.3.0, 10.0.1.0, 10.2.1.0, and 10.3.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2011-10-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2894","description":"Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects from untrusted sources, which allows remote attackers to bypass intended security restrictions and execute untrusted code by (1) serializing a java.lang.Proxy instance and using InvocationHandler, or (2) accessing internal AOP interfaces, as demonstrated using deserialization of a DefaultListableBeanFactory instance to execute arbitrary commands via the java.lang.Runtime class.","exploit_maturity":"Proof of concept only","published":"2011-10-04","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2011-1359","description":"Directory traversal vulnerability in the administration console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41, 7.0 before 7.0.0.19, and 8.0 before 8.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.","exploit_maturity":"No public exploit","published":"2011-09-06","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2011-2729","description":"native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.","exploit_maturity":"No public exploit","published":"2011-08-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-2481","description":"Apache Tomcat 7.0.x before 7.0.17 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application. NOTE: this vulnerability exists because of a CVE-2009-0783 regression.","exploit_maturity":"No public exploit","published":"2011-08-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-2196","description":"jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484.","exploit_maturity":"No public exploit","published":"2011-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-1484","description":"jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application.","exploit_maturity":"No public exploit","published":"2011-07-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-2284","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0 Bundle #17 allows remote authenticated users to affect confidentiality via unknown vectors related to ePerformance.","exploit_maturity":"No public exploit","published":"2011-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2283","description":"Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Products 9.0 Bundle #36 and 9.1 Bundle #13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Payables.","exploit_maturity":"No public exploit","published":"2011-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2281","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 Update 2011-D allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Global Payroll Core.","exploit_maturity":"No public exploit","published":"2011-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2280","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49.31, 8.50.20, and 8.51.11 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2011-2274.","exploit_maturity":"No public exploit","published":"2011-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2279","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1, Bundle, and #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Manager.","exploit_maturity":"No public exploit","published":"2011-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2278","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9, Bundle, #24, 9.0, Bundle, #17, 9.1, Bundle, and #6 allows remote authenticated users to affect confidentiality via unknown vectors related to Talent Acquisition Manager.","exploit_maturity":"No public exploit","published":"2011-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2277","description":"Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 Bundle #36 and 9.1 Bundle #13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Purchasing.","exploit_maturity":"No public exploit","published":"2011-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2275","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49.31, 8.50.20, and 8.51.11 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2011-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2273","description":"Unspecified vulnerability in the Agile Core Technology component in Oracle Supply Chain Products Suite 9.3.0.3 and 9.3.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Search.","exploit_maturity":"No public exploit","published":"2011-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2272","description":"Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.0, Bundle, #36, 9.1, Bundle, and #13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to eProcurement.","exploit_maturity":"No public exploit","published":"2011-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2250","description":"Unspecified vulnerability in the PeopleSoft Enterprise FIN component in Oracle PeopleSoft Products 9.0 Bundle #36 and 9.1 Bundle #13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Receivables.","exploit_maturity":"No public exploit","published":"2011-07-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2246","description":"Unspecified vulnerability in the Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Financials.","exploit_maturity":"No public exploit","published":"2011-07-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-2241","description":"Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.1 and 11.1.1.3 allows remote attackers to affect availability via unknown vectors related to Analytics Server.","exploit_maturity":"No public exploit","published":"2011-07-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0884","description":"Unspecified vulnerability in the Oracle BPEL Process Manager component in Oracle Fusion Middleware 11.1.1.3.0, 11.1.1.4.0, and 11.1.1.5.0 allows remote authenticated users to affect availability, related to BPEL Console.","exploit_maturity":"No public exploit","published":"2011-07-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0883","description":"Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.2.3, 10.1.3.5, 10.1.4.0.1, and 10.1.4.3 allows remote authenticated users to affect integrity, related to Servlet Runtime in OC4J.","exploit_maturity":"No public exploit","published":"2011-07-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0845","description":"Unspecified vulnerability in the Database Control component in Oracle Enterprise Manager Grid Control 10.1.0.6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2011-07-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1355","description":"Open redirect vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage parameter.","exploit_maturity":"No public exploit","published":"2011-07-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3271","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console (aka administrative console) in IBM WebSphere Application Server (WAS) 7.0.0.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that disable certain security options via an Edit action to console/adminSecurityDetail.do followed by a save action to console/syncworkspace.do.","exploit_maturity":"Working exploit published","published":"2011-07-18","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2011-2526","description":"Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.","exploit_maturity":"No public exploit","published":"2011-07-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-1498","description":"Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header.","exploit_maturity":"No public exploit","published":"2011-07-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-0872","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO.","exploit_maturity":"No public exploit","published":"2011-06-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0869","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 26 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to SAAJ.","exploit_maturity":"No public exploit","published":"2011-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-0868","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.","exploit_maturity":"No public exploit","published":"2011-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-0867","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Networking.","exploit_maturity":"No public exploit","published":"2011-06-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-1582","description":"Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1088, CVE-2011-1183, and CVE-2011-1419.","exploit_maturity":"No public exploit","published":"2011-05-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-2088","description":"XWork 2.2.1 in Apache Struts 2.2.1, and OpenSymphony XWork in OpenSymphony WebWork, allows remote attackers to obtain potentially sensitive information about internal Java class paths via vectors involving an s:submit element and a nonexistent method, a different vulnerability than CVE-2011-1772.3.","exploit_maturity":"No public exploit","published":"2011-05-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-2087","description":"Multiple cross-site scripting (XSS) vulnerabilities in component handlers in the javatemplates (aka Java Templates) plugin in Apache Struts 2.x before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via an arbitrary parameter value to a .action URI, related to improper handling of value attributes in (1) FileHandler.java, (2) HiddenHandler.java, (3) PasswordHandler.java, (4) RadioHandler.java, (5) ResetHandler.java, (6) SelectHandler.java, (7) SubmitHandler.java, and (8) TextFieldHandler.java.","exploit_maturity":"No public exploit","published":"2011-05-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-1571","description":"Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.","exploit_maturity":"Working exploit published","published":"2011-05-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2011-1209","description":"IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.17 uses a weak WS-Security XML encryption algorithm, which makes it easier for remote attackers to obtain plaintext data from a (1) JAX-RPC or (2) JAX-WS Web Services request via unspecified vectors related to a \"decryption attack.\"","exploit_maturity":"No public exploit","published":"2011-05-04","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0861","description":"Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.0 Update 2011-B and 9.1 Update 2011-B allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Global Payroll Core.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0860","description":"Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.0 Update 2011-B and 9.1 Update 2011-B allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Global Payroll - Spain.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0859","description":"Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.0 Tax Update 11-B and 9.1 Tax Update 11-B allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Global Payroll - North America.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0858","description":"Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.0 Bundle #15 and 9.1 Bundle #5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Manager.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0857","description":"Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.0 Bundle #15 and 9.1 Bundle #5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Pension Administration.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0856","description":"Unspecified vulnerability in Oracle PeopleSoft Enterprise 8.49 GA through 8.49.30, 8.50 GA through 8.50.17, and 8.51 GA through 8.51.07 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0855","description":"Unspecified vulnerability in the InForm component in Oracle Industry Applications 4.5, 4.6, and 5.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Core.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0854","description":"Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.1 Bundle #5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to ePerformance.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0853","description":"Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.0 Bundle #15 and 9.1 Bundle #5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to ePerformance.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0851","description":"Unspecified vulnerability in Oracle PeopleSoft Enterprise ELS 9.0 Bundle #19 and 9.1 Bundle #5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Learning Mgmt.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0850","description":"Unspecified vulnerability in Oracle PeopleSoft Enterprise CRM 8.9 Bundle #41 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Order Capture.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0843","description":"Unspecified vulnerability in the Siebel CRM Core component in Oracle Siebel CRM 7.8.2, 8.0.0, and 8.1.1 allows remote attackers to affect integrity via unknown vectors related to Globalization - Automotive.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0840","description":"Unspecified vulnerability in Oracle PeopleSoft Enterprise PeopleTools 8.49 GA through 8.49.30 allows remote authenticated users to affect confidentiality via unknown vectors related to File Processing.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0837","description":"Unspecified vulnerability in the Agile Technology Platform component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote attackers to affect confidentiality via unknown vectors related to Security.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0834","description":"Unspecified vulnerability in the Siebel CRM Core component in Oracle Siebel CRM 8.0.0 and 8.1.1 allows remote attackers to affect integrity via unknown vectors related to Globalization - Automotive.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0833","description":"Unspecified vulnerability in the Siebel CRM Core component in Oracle Siebel CRM 7.8.2, 8.0.0, and 8.1.1 allows remote attackers to affect integrity, related to UIF Client.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0828","description":"Unspecified vulnerability in Oracle PeopleSoft Enterprise 8.8 Bundle #13 allows remote attackers to affect integrity via unknown vectors related to Application Portal.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0825","description":"Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote attackers to affect confidentiality, integrity, and availability, related to Enterprise Infrastructure SEC.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0824","description":"Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote attackers to affect confidentiality and integrity, related to Enterprise Infrastructure SEC.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0823","description":"Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote attackers to affect integrity, related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2011-0819.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0819","description":"Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote attackers to affect integrity, related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2011-0823.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0818","description":"Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote attackers to affect availability, related to Enterprise Infrastructure SEC.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0810","description":"Unspecified vulnerability Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote attackers to affect availability, related to Enterprise Infrastructure SEC.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0809","description":"Unspecified vulnerability in the Web ADI component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0808","description":"Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Outside In Filters. NOTE: the previous information was obtained from the April 2011 CPU. Oracle has not commented on claims from a reliable third party that this issue is in (a) vswk6.dll or (b) libvs_wk6.so in Outside In 8.1.0.4037 through 8.3.5.5684, involving the Lotus 123 parser.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0803","description":"Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 8.9 GA through 8.98.4.1, and OneWorld Tools through 24.1.3, allows remote attackers to affect integrity and availability, related to Enterprise Infrastructure SEC.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0798","description":"Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 and 11.1.1.2.0 allows remote attackers to affect integrity via unknown vectors related to Midtier Infrastructure.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0794","description":"Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5.0 allows local users to affect confidentiality, integrity, and availability, related to File ID SDK. NOTE: the previous information was obtained from the April 2011 CPU. Oracle has not commented on claims from a reliable third party that this issue is in (a) sccut.dll or (b) libsc_ut.so in Outside In 8.3.5.x through 8.3.5.5684, as used when using the CAB file identification functionality to parse OneNote (.onepkg) files and other formats.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0791","description":"Unspecified vulnerability in the Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Data Export.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0789","description":"Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2011-04-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1683","description":"IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors.","exploit_maturity":"No public exploit","published":"2011-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1475","description":"The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to \"a mix-up of responses for requests from different users.\"","exploit_maturity":"No public exploit","published":"2011-04-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-1183","description":"Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, which allows remote attackers to bypass intended access restrictions via HTTP requests to a meta-data complete web application. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1088 and CVE-2011-1419.","exploit_maturity":"No public exploit","published":"2011-04-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-1419","description":"Apache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1088.","exploit_maturity":"No public exploit","published":"2011-03-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-1088","description":"Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.","exploit_maturity":"No public exploit","published":"2011-03-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-1322","description":"The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via encrypted SOAP messages.","exploit_maturity":"No public exploit","published":"2011-03-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1321","description":"The AuthCache purge implementation in the Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 does not purge a user from the PlatformCredential cache, which might allow remote authenticated users to gain privileges by leveraging a group membership specified in an old RACF Object (aka RACO).","exploit_maturity":"No public exploit","published":"2011-03-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1320","description":"The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when the Tivoli Integrated Portal / embedded WebSphere Application Server (TIP/eWAS) framework is used, does not properly delete AuthCache entries upon a logout, which might allow remote attackers to access the server by leveraging an unattended workstation.","exploit_maturity":"No public exploit","published":"2011-03-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1319","description":"The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote authenticated users to cause a denial of service (memory consumption) by using a Lightweight Third-Party Authentication (LTPA) token for authentication.","exploit_maturity":"No public exploit","published":"2011-03-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1317","description":"Memory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by sending many JSP requests that trigger large responses.","exploit_maturity":"No public exploit","published":"2011-03-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1316","description":"The Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (worker thread exhaustion and UDP messaging outage) by sending many UDP messages.","exploit_maturity":"No public exploit","published":"2011-03-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1315","description":"Memory leak in the messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via network connections associated with a NULL return value from a synchronous JMS receive call.","exploit_maturity":"No public exploit","published":"2011-03-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1314","description":"The Service Integration Bus (SIB) messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (daemon hang) by performing close operations via network connections to a queue manager.","exploit_maturity":"No public exploit","published":"2011-03-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1313","description":"Double free vulnerability in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote backend IIOP servers to cause a denial of service (S0C4 ABEND and storage corruption) by rejecting IIOP requests at opportunistic time instants, as demonstrated by requests associated with an ORB_Request::getACRWorkElementPtr function call.","exploit_maturity":"No public exploit","published":"2011-03-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1312","description":"The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not prevent modifications of the primary admin id, which allows remote authenticated administrators to bypass intended access restrictions by mapping a (1) user or (2) group to an administrator role.","exploit_maturity":"No public exploit","published":"2011-03-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1311","description":"The Security component in IBM WebSphere Application Server (WAS) before 7.0.0.15, when a J2EE 1.4 application is used, determines the security role mapping on the basis of the ibm-application-bnd.xml file instead of the intended ibm-application-bnd.xmi file, which might allow remote authenticated users to gain privileges in opportunistic circumstances by requesting a service.","exploit_maturity":"No public exploit","published":"2011-03-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-1308","description":"Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2011-03-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0013","description":"Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag.","exploit_maturity":"No public exploit","published":"2011-02-19","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-0533","description":"Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to the autoIncludeParameters setting for the extremecomponents table.","exploit_maturity":"No public exploit","published":"2011-02-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-4476","description":"The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.","exploit_maturity":"Working exploit published","published":"2011-02-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2010-4471","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to 2D. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is related to the exposure of system properties via vectors related to Font.createFont and exception text.","exploit_maturity":"No public exploit","published":"2011-02-17","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-4470","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is related to \"Features set on SchemaFactory not inherited by Validator.\"","exploit_maturity":"No public exploit","published":"2011-02-17","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-4468","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors related to JDBC.","exploit_maturity":"No public exploit","published":"2011-02-17","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2008-7274","description":"IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by (1) not providing a password or (2) providing an empty password.","exploit_maturity":"No public exploit","published":"2011-02-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0534","description":"Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service (OutOfMemoryError) via a crafted request.","exploit_maturity":"No public exploit","published":"2011-02-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2011-0025","description":"IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify signatures for JAR files that (1) are \"partially signed\" or (2) signed by multiple entities, which allows remote attackers to trick users into executing code that appears to come from a trusted source.","exploit_maturity":"No public exploit","published":"2011-02-04","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0509","description":"Cross-site scripting (XSS) vulnerability in Vaadin before 6.4.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the index page.","exploit_maturity":"No public exploit","published":"2011-01-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-4351","description":"The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission method instead of throwing an exception in certain circumstances, which might allow context-dependent attackers to bypass the intended security policy by creating instances of ClassLoader.","exploit_maturity":"No public exploit","published":"2011-01-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-4461","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #23, 9.0 Bundle #14, and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to ePerformance.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-4455","description":"Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.2 and 11.1.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Apache Plugin.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-4453","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect integrity via unknown vectors related to Servlet Container.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-4445","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #14 and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality via unknown vectors related to Talent Acquisition Manager.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-4441","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.1 Bundle #4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Manager.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-4439","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #14 and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality via unknown vectors related to eProfile - Manager Desktop.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-4437","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.","exploit_maturity":"Working exploit published","published":"2011-01-19","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2010-4434","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.50.0 through 8.50.14 and 8.51.0 through 8.51.04 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-4430","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.1 Update 2010-F allows remote authenticated users to affect confidentiality via unknown vectors related to Absence Management.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-4428","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.0 Update 2010-F allows remote authenticated users to affect confidentiality via unknown vectors related to Absence Management.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-4426","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.0 through 8.49.29, 8.50.0 through 8.50.14, and 8.51.0 through 8.51.04 allows remote attackers to affect integrity, related to PIA Core Technology.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-4424","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.0 through 8.49.29, 8.50.0 through 8.50.14, and 8.51.0 through 8.51.04 allows remote attackers to affect availability via unknown vectors related to the Security sub-component.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-4419","description":"Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #31 and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Order Capture.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-4416","description":"Unspecified vulnerability in the Oracle GoldenGate Veridata component in Oracle Fusion Middleware 3.0.0.4 allows remote attackers to affect availability via unknown vectors related to Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party researcher that this is a buffer overflow via a crafted XML soap request and a value that does not contain the expected 0x20 terminator character.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3594","description":"Unspecified vulnerability in the Real User Experience Insight component in Oracle Enterprise Manager Grid Control 6.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Processing. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that this is SQL injection in rsynclogdird involving improper escaping of UTF-8 characters while processing log files.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2010-3589","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle Applications 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Logout.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3588","description":"Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 10.1.2.3, 11.1.1.2.0, and 11.1.1.3.0 allows remote authenticated users to affect confidentiality and integrity, related to EUL Code \u0026 Schema.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3587","description":"Unspecified vulnerability in the Oracle Common Applications component in Oracle Applications 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to User Management.","exploit_maturity":"No public exploit","published":"2011-01-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0316","description":"The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote attackers to obtain potentially sensitive status information via a direct request.","exploit_maturity":"No public exploit","published":"2011-01-12","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2011-0315","description":"Cross-site scripting (XSS) vulnerability in the Servlet Engine / Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to the lack of an error page for an application.","exploit_maturity":"No public exploit","published":"2011-01-12","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3878","description":"Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files.","exploit_maturity":"No public exploit","published":"2010-12-30","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-3860","description":"IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including (1) user.name, (2) user.home, and (3) java.home system properties, and other sensitive information such as installation directories.","exploit_maturity":"No public exploit","published":"2010-12-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-4408","description":"Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1 does not require entry of the administrator's password at the time of modifying a user account, which makes it easier for context-dependent attackers to gain privileges by leveraging a (1) unattended workstation or (2) cross-site request forgery (CSRF) vulnerability, a related issue to CVE-2010-3449.","exploit_maturity":"No public exploit","published":"2010-12-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-4312","description":"The default configuration of Apache Tomcat 6.x does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to hijack a session via script access to a cookie.","exploit_maturity":"No public exploit","published":"2010-11-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-4172","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.","exploit_maturity":"Working exploit published","published":"2010-11-26","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2010-4220","description":"Cross-site scripting (XSS) vulnerability in the Integrated Solution Console in the Administrative Console component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to \"URL injection.\"","exploit_maturity":"No public exploit","published":"2010-11-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0786","description":"The Web Services Security component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 does not properly implement the Java API for XML Web Services (aka JAX-WS), which allows remote attackers to cause a denial of service (data corruption) via a crafted JAX-WS request that leads to incorrectly encoded data.","exploit_maturity":"No public exploit","published":"2010-11-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0785","description":"Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-11-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0784","description":"Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2010-11-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0783","description":"Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2010-11-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3863","description":"Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths before comparing them to entries in the shiro.ini file, which allows remote attackers to bypass intended access restrictions via a crafted request, as demonstrated by the /./account/index.jsp URI.","exploit_maturity":"Working exploit published","published":"2010-11-05","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2010-3700","description":"VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.","exploit_maturity":"No public exploit","published":"2010-10-29","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-4007","description":"Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057.","exploit_maturity":"No public exploit","published":"2010-10-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-2057","description":"shared/util/StateUtils.java in Apache MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1 uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack.","exploit_maturity":"No public exploit","published":"2010-10-20","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-3573","description":"Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.","exploit_maturity":"Working exploit published","published":"2010-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-3557","description":"Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to the modification of \"behavior and state of certain JDK classes\" and \"mutable static.\"","exploit_maturity":"No public exploit","published":"2010-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-3551","description":"Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-3549","description":"Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is an HTTP request splitting vulnerability involving the handling of the chunked transfer encoding method by the HttpURLConnection class.","exploit_maturity":"No public exploit","published":"2010-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-3548","description":"Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this allows remote attackers to determine internal IP addresses or \"otherwise-protected internal network names.\"","exploit_maturity":"No public exploit","published":"2010-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-3541","description":"Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.","exploit_maturity":"No public exploit","published":"2010-10-19","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-3547","description":"Unspecified vulnerability in the PeopleSoft FMS ESA - EX component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3539","description":"Unspecified vulnerability in the PeopleSoft Enterprise FMS - GL component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2010-3538.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3538","description":"Unspecified vulnerability in the PeopleSoft Enterprise FMS - GL component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2010-3539.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3537","description":"Unspecified vulnerability in the PeopleSoft Enterprise FMS - AM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3536","description":"Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3534","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 6.21.3.0 and 7.0.1.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Project Management Module.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3533","description":"Unspecified vulnerability in the PeopleSoft Enterprise SCM OM and CRM Order Capture component in Oracle PeopleSoft and JDEdwards Suite 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3532","description":"Unspecified vulnerability in the PeopleSoft Enterprise CRM - Order Capture component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #28 and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3531","description":"Unspecified vulnerability in the PeopleSoft Enterprise FMS ESA - RM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3530","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM - HR component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #13 and 9.1 Bundle #3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3529","description":"Unspecified vulnerability in the PeopleSoft Enterprise FMS - Cash Management component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3528","description":"Unspecified vulnerability in the PeopleSoft Enterprise CRM - Common Components component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #41, 9.0 Bundle #28, and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3527","description":"Unspecified vulnerability in the PeopleSoft Enterprise FMS - AM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect integrity and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3526","description":"Unspecified vulnerability in the PeopleSoft Enterprise SCM - PO component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3525","description":"Unspecified vulnerability in the (1) PeopleSoft Enterprise FMS, (2) SCM, (3) EPM, (4) CRM, and (5) Campus Solutions components in Oracle PeopleSoft and JDEdwards Suite 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3524","description":"Unspecified vulnerability in the PeopleSoft Enterprise SCM - Strategic Sourcing component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3523","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.28 and 8.50.12 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3522","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.28 and 8.50.12 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3521","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM ePay component in Oracle PeopleSoft and JDEdwards Suite 9.0 to Payroll Update 10-C and 9.1 to Payroll Update 10-C allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3520","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM - GP France component in Oracle PeopleSoft and JDEdwards Suite 8.81 SP1 Bundle #12, 8.9 GP Update 2010-E, 9.0 GP Update 2010-E, and 9.1 GP Update 2010-E allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3519","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.28 and 8.50.12 allows remote authenticated users to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3518","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM GP - Japan component in Oracle PeopleSoft and JDEdwards Suite 8.81 SP1 Bundle #13, 8.9 GP Update 2010-E, 9.0 GP Update 2010-E, and 9.1 GP Update 2010-E allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3504","description":"Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3502","description":"Unspecified vulnerability in the Siebel Core component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3501","description":"Unspecified vulnerability in the OID component in Oracle Fusion Middleware 10.1.2.3, 10.1.4.3, and 11.1.1.2.0 allows remote attackers to affect availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-3500","description":"Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-2405.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2418","description":"Unspecified vulnerability in the Oracle Territory Management component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2417","description":"Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.0.0 allows remote authenticated users to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2416","description":"Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2413","description":"Unspecified vulnerability in the BI Publisher component in Oracle Fusion Middleware 10.1.3.3.2 and 10.1.3.4.1 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2410","description":"Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2395 and CVE-2010-2409.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2409","description":"Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2395 and CVE-2010-2410.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2408","description":"Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2406","description":"Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2405","description":"Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-3500.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2396","description":"Unspecified vulnerability in the Forms component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2395","description":"Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2409 and CVE-2010-2410.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2388","description":"Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0781","description":"Unspecified vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.33 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted URL.","exploit_maturity":"No public exploit","published":"2010-09-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-1870","description":"The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote attackers to modify server-side context objects and bypass the \"#\" protection mechanism in ParameterInterceptors via the (1) #context, (2) #_memberAccess, (3) #root, (4) #this, (5) #_typeResolver, (6) #_classResolver, (7) #_traceEvaluations, (8) #_lastEvaluation, (9) #_keepLastEvaluation, and possibly other OGNL context variables, a different vulnerability than CVE-2008-6504.","exploit_maturity":"Working exploit published","published":"2010-08-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2010-2493","description":"The default configuration of the deployment descriptor (aka web.xml) in picketlink-sts.war in (1) the security_saml quickstart, (2) the webservice_proxy_security quickstart, (3) the web-console application, (4) the http-invoker application, (5) the gpd-deployer application, (6) the jbpm-console application, (7) the contract application, and (8) the uddi-console application in JBoss Enterprise SOA Platform before 5.0.2 contains GET and POST http-method elements, which allows remote attackers to bypass intended access restrictions via a crafted HTTP request.","exploit_maturity":"No public exploit","published":"2010-08-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-2696","description":"Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\" NOTE: this is due to a missing fix for CVE-2009-0781.","exploit_maturity":"No public exploit","published":"2010-08-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-2402","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.27 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2401","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM - eProfile Mgr component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle #9 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2398","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle #12 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2380","description":"Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft and JDEdwards Suite SCM 8.9 Bundle #37, SCM 9.0 Bundle #30, and SCM 9.1 Bundle #4 allows local users to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2379","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM - Time \u0026 Labor component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle #13 and HCM 9.1 Bundle #2 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2377","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.27 and 8.50.10 allows remote authenticated users to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2375","description":"Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity, related to IIS.","exploit_maturity":"Working exploit published","published":"2010-07-13","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2010-2373","description":"Unspecified vulnerability in the Console component in Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2372","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1.1 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2371.","exploit_maturity":"No public exploit","published":"2010-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2370","description":"Unspecified vulnerability in the Oracle Business Process Management component in Oracle Fusion Middleware 5.7 MP3, 6.0 MP5, and 10.3 MP2 allows remote attackers to affect integrity, related to BPM.","exploit_maturity":"Working exploit published","published":"2010-07-13","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2010-2227","description":"Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with \"recycling of a buffer.\"","exploit_maturity":"Forecast only","published":"2010-07-13","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-0915","description":"Unspecified vulnerability in the Oracle Advanced Product Catalog component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0913","description":"Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0912","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0905","description":"Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0835","description":"Unspecified vulnerability in the Wireless component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-07-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0779","description":"Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2010-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0778","description":"Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.33 and 7.0 before 7.0.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2010-06-24","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-1622","description":"SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.","exploit_maturity":"Working exploit published","published":"2010-06-21","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2010-2328","description":"The HTTP Channel in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (NullPointerException) via a large amount of chunked data that uses gzip compression.","exploit_maturity":"No public exploit","published":"2010-06-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2327","description":"mod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server (WAS) on z/OS, does not properly handle a large HTTP request body in uploading over SSL, which might allow remote attackers to cause a denial of service (daemon fail) via an upload.","exploit_maturity":"No public exploit","published":"2010-06-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2326","description":"IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11, when addNode -trace is used during node federation, allows attackers to obtain sensitive information about CIMMetadataCollectorImpl trace actions by reading the addNode.log file.","exploit_maturity":"No public exploit","published":"2010-06-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2325","description":"Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to \"URL injection.\"","exploit_maturity":"No public exploit","published":"2010-06-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2323","description":"IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to obtain sensitive information by reading the default_create.log file that is associated with profile creation by the BBOWWPFx job and the zPMT.","exploit_maturity":"No public exploit","published":"2010-06-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2274","description":"Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, possibly related to dojo/resources/iframe_history.html, dojox/av/FLAudio.js, dojox/av/FLVideo.js, dojox/av/resources/audio.swf, dojox/av/resources/video.swf, util/buildscripts/jslib/build.js, util/buildscripts/jslib/buildUtil.js, and util/doh/runner.html.","exploit_maturity":"No public exploit","published":"2010-06-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-2103","description":"Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the modules parameter. NOTE: some of these details are obtained from third party information.","exploit_maturity":"Working exploit published","published":"2010-05-27","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2010-2087","description":"Oracle Mojarra 1.2_14 and 2.0.2, as used in IBM WebSphere Application Server, Caucho Resin, and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression Language (EL) statements via vectors that involve modifying the serialized view object.","exploit_maturity":"No public exploit","published":"2010-05-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-2086","description":"Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression Language (EL) statements via vectors that involve modifying the serialized view object.","exploit_maturity":"No public exploit","published":"2010-05-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-0776","description":"The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle chunked transfer encoding during a call to response.sendRedirect, which allows remote attackers to cause a denial of service via a GET request.","exploit_maturity":"No public exploit","published":"2010-05-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0775","description":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a crafted request, related to the nodeagent and Deployment Manager components.","exploit_maturity":"No public exploit","published":"2010-05-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0774","description":"The (1) JAX-RPC WS-Security 1.0 and (2) JAX-WS runtime implementations in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 do not properly handle WebServices PKCS#7 and PKIPath tokens, which allows remote attackers to bypass intended access restrictions via unspecified vectors.","exploit_maturity":"No public exploit","published":"2010-05-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-1587","description":"The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.jsp.","exploit_maturity":"Working exploit published","published":"2010-04-28","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2010-0738","description":"The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.","exploit_maturity":"Exploited in the wild","published":"2010-04-28","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2010-0880","description":"Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.26 and 8.50.07 allows remote attackers to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0879","description":"Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.26 and 8.50.07 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0878","description":"Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.26 and 8.50.07 allows remote authenticated users to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0877","description":"Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.26 and 8.50.07 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0876","description":"Unspecified vulnerability in the Life Sciences - Oracle Clinical Remote Data Capture Option component in Oracle Industry Product Suite 4.5.3 and 4.6 allows remote attackers to affect integrity, related to RDC Onsite.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0875","description":"Unspecified vulnerability in the Life Sciences - Oracle Thesaurus Management System component in Oracle Industry Product Suite 4.5.2, 4.6, and 4.6.1 allows remote attackers to affect integrity, related to TMS Browser.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0874","description":"Unspecified vulnerability in the Communications - Oracle Communications Unified Inventory Management component in Oracle Industry Product Suite 7.1 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0872","description":"Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3 allows remote attackers to affect availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0871","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0869","description":"Unspecified vulnerability in the Oracle Transportation Management component in Oracle E-Business Suite 5.5.05.07, 5.5.06.00, and 6.0.03 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0868","description":"Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0865","description":"Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle E-Business Suite 6.1.1.0 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0864","description":"Unspecified vulnerability in the Retail - Oracle Retail Place In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0863","description":"Unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0862","description":"Unspecified vulnerability in the Retail - Oracle Retail Markdown Optimization component in Oracle Industry Product Suite 13.1 allows remote attackers to affect integrity via unknown vectors related to Online Help.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0861","description":"Unspecified vulnerability in the Oracle HRMS (Self Service) component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0859","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 ATG RUP6 allows remote attackers to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0856","description":"Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.2 allows remote attackers to affect availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0855","description":"Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0086.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0086","description":"Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0855.","exploit_maturity":"No public exploit","published":"2010-04-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-1244","description":"Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action.","exploit_maturity":"No public exploit","published":"2010-04-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-0845","description":"Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-0770","description":"IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote authenticated users to cause a denial of service (ORB ListenerThread hang) by aborting an SSL handshake.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0768","description":"Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote attackers to inject arbitrary web script or HTML via the URI.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0095","description":"Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0093.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-0093","description":"Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0095.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-0092","description":"Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2010-0091","description":"Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-0084.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-0090","description":"Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18 allows remote attackers to affect integrity and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-0089","description":"Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-0088","description":"Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0085.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-0085","description":"Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0088.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-0084","description":"Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-0091.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-0082","description":"Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-04-01","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"}, {"cve_id":"CVE-2010-0563","description":"The Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through 7.0.0.8 does not recognize the Requires SSL configuration option, which might allow remote attackers to obtain sensitive information by sniffing network sessions that were expected to be encrypted.","exploit_maturity":"No public exploit","published":"2010-02-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-2902","description":"Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename.","exploit_maturity":"No public exploit","published":"2010-01-28","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2009-2901","description":"The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files that remain from a failed undeploy, which might allow remote attackers to bypass intended authentication requirements via HTTP requests.","exploit_maturity":"No public exploit","published":"2010-01-28","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-2693","description":"Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.","exploit_maturity":"No public exploit","published":"2010-01-28","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2010-0080","description":"Unspecified vulnerability in the PeopleSoft Enterprise HCM - eProfile component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 Bundle, #21 and 9.0 Bundle #11 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-01-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0078","description":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-01-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0077","description":"Unspecified vulnerability in the CRM Technical Foundation (mobile) component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-01-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0075","description":"Unspecified vulnerability in the Oracle HRMS (Self Service) component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-01-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0074","description":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-01-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0070","description":"Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 10.1.2.3 and 10.1.3.4 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-01-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0069","description":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0, SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP1, and 10.3.0 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-01-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0068","description":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-01-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0067","description":"Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 10.1.2.3 and 10.1.3.4 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-01-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2010-0066","description":"Unspecified vulnerability in the Access Manager Identity Server component in Oracle Application Server 7.0.4.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-01-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-3416","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2010-01-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-2405","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML via the (1) monitorName, (2) objectName, (3) attribute, or (4) period parameter to createSnapshot.jsp, or the (5) monitorName, (6) objectName, (7) attribute, (8) threshold, (9) period, or (10) enabled parameter to createThresholdMonitor.jsp. NOTE: some of these details are obtained from third party information.","exploit_maturity":"No public exploit","published":"2009-12-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-1380","description":"Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 allows remote attackers to inject arbitrary web script or HTML via the filter parameter, related to the key property and the position of quote and colon characters.","exploit_maturity":"No public exploit","published":"2009-12-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-2749","description":"Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values, which allows man-in-the-middle attackers to spoof a collaboration session by guessing the value.","exploit_maturity":"No public exploit","published":"2009-12-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-2746","description":"Cross-site request forgery (CSRF) vulnerability in the administrative console in the Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 allows remote attackers to hijack the authentication of administrators via unspecified vectors.","exploit_maturity":"No public exploit","published":"2009-11-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-3885","description":"Sun Java SE 5.0 before Update 22 and 6 before Update 17 on Windows allows remote attackers to cause a denial of service via a BMP file containing a link to a UNC share pathname for an International Color Consortium (ICC) profile file, probably a related issue to CVE-2007-2789, aka Bug Id 6632445.","exploit_maturity":"No public exploit","published":"2009-11-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-3884","description":"The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.","exploit_maturity":"No public exploit","published":"2009-11-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-3880","description":"The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.","exploit_maturity":"No public exploit","published":"2009-11-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-3729","description":"Unspecified vulnerability in the TrueType font parsing functionality in Sun Java SE 5.0 before Update 22 and 6 before Update 17 allows remote attackers to cause a denial of service (application crash) via a certain test suite, aka Bug Id 6815780.","exploit_maturity":"No public exploit","published":"2009-11-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-3728","description":"Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.","exploit_maturity":"No public exploit","published":"2009-11-09","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2009-3877","description":"Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.","exploit_maturity":"No public exploit","published":"2009-11-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-3876","description":"Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.","exploit_maturity":"No public exploit","published":"2009-11-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-3875","description":"The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to \"timing attack vulnerabilities,\" aka Bug Id 6863503.","exploit_maturity":"No public exploit","published":"2009-11-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-3408","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-10-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-3405","description":"Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remote authenticated users to affect integrity and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-10-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-3404","description":"Unspecified vulnerability in the PeopleSoft PeopleTools \u0026 Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.23 allows remote authenticated users to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-10-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-3400","description":"Unspecified vulnerability in the Oracle Advanced Benefits component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-10-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-3397","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-10-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-3395","description":"Unspecified vulnerability in the AutoVue component in Oracle E-Business Suite 19.3.2 allows remote attackers to affect availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-10-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-3393","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-10-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-3392","description":"Unspecified vulnerability in the Agile Engineering Data Management (EDM) component in Oracle E-Business Suite 6.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-10-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-2742","description":"Cross-site scripting (XSS) vulnerability in Eclipse Help in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input.","exploit_maturity":"No public exploit","published":"2009-09-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-7239","description":"Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 allow remote attackers to affect confidentiality via unknown vectors related to the (1) Oracle Application Object Library (APP02) and (2) Oracle Applications Manager (APP04).","exploit_maturity":"No public exploit","published":"2009-09-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-7238","description":"Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) remote attackers to affect confidentiality via unknown vectors related to the Oracle Applications Framework (APP03); remote authenticated users to affect confidentiality and integrity via unknown vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remote authenticated users to affect integrity and availability via unknown vectors related to (5) Oracle Applications Technology Stack (APP07).","exploit_maturity":"No public exploit","published":"2009-09-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-7235","description":"Unspecified vulnerability in the Oracle Forms component in Oracle Application Server 10.1.2.2 and E-Business Suite 12.0.3 allows remote attackers to affect integrity via unknown vectors, aka AS04.","exploit_maturity":"No public exploit","published":"2009-09-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-7227","description":"PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an \"in memory buffer,\" which prevents the reporting of a service exception, with unknown impact and attack vectors.","exploit_maturity":"No public exploit","published":"2009-09-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-3106","description":"The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.37 does not properly implement security constraints on the (1) doGet and (2) doTrace methods, which allows remote attackers to bypass intended access restrictions and obtain sensitive information via a crafted HTTP HEAD request to a Web Application.","exploit_maturity":"No public exploit","published":"2009-09-08","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-2091","description":"The System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 on z/OS uses weak file permissions for new applications, which allows remote attackers to obtain sensitive information via unspecified vectors.","exploit_maturity":"No public exploit","published":"2009-08-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-2090","description":"Unspecified vulnerability in wsadmin in the System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 allows remote attackers to bypass intended Java Management Extensions (JMX) Management Beans (aka MBeans) access restrictions, and cause a denial of service (daemon stop), via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-08-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-0906","description":"The Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS) SCA 1.0 before 1.0.0.3 allows remote authenticated users to bypass intended authentication.transport access restrictions and obtain unspecified access via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-08-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-2625","description":"XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.","exploit_maturity":"No public exploit","published":"2009-08-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-2676","description":"Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher.","exploit_maturity":"No public exploit","published":"2009-08-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-2671","description":"The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.","exploit_maturity":"No public exploit","published":"2009-08-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-2670","description":"The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties.","exploit_maturity":"No public exploit","published":"2009-08-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-1989","description":"Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-07-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-1988","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-07-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-1987","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools - Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.21 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-07-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-1984","description":"Unspecified vulnerability in the Application Install component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Patch Administrator.","exploit_maturity":"No public exploit","published":"2009-07-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-1983","description":"Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-07-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-1982","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2 and 12.0.6 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-07-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-1980","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-07-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-0904","description":"The IBM Stax XMLStreamWriter in the Web Services component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 does not properly process XML encoding, which allows remote attackers to bypass intended access restrictions and possibly modify data via \"XML fuzzing attacks\" sent through SOAP requests.","exploit_maturity":"No public exploit","published":"2009-07-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5515","description":"Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.","exploit_maturity":"No public exploit","published":"2009-06-16","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2009-0783","description":"Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.","exploit_maturity":"No public exploit","published":"2009-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-0580","description":"Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.","exploit_maturity":"Working exploit published","published":"2009-06-05","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2009-0033","description":"Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.","exploit_maturity":"No public exploit","published":"2009-06-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-1900","description":"The Configservice APIs in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5, when tracing is enabled, allow remote attackers to obtain sensitive information via unspecified use of the wsadmin scripting tool.","exploit_maturity":"No public exploit","published":"2009-06-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-1898","description":"The secure login page in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network.","exploit_maturity":"No public exploit","published":"2009-06-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-0899","description":"IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 through 6.0, and IBM Integrated Solutions Console (ISC) 6.0.1 do not properly set the IsSecurityEnabled security flag during migration of WebSphere Member Manager (WMM) to Virtual Member Manager (VMM) and a Federated Repository, which allows attackers to obtain sensitive information from repositories via unspecified vectors.","exploit_maturity":"No public exploit","published":"2009-06-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2004-2763","description":"The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.","exploit_maturity":"No public exploit","published":"2009-06-01","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2009-1595","description":"The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.","exploit_maturity":"Working exploit published","published":"2009-05-11","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2009-1523","description":"Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.","exploit_maturity":"Working exploit published","published":"2009-05-05","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2009-1190","description":"Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit (JDK) before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows remote attackers to cause a denial of service (CPU consumption) via serializable data with a long regex string containing multiple optional groups, a related issue to CVE-2004-2540.","exploit_maturity":"No public exploit","published":"2009-04-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-0039","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hijack the authentication of administrators for requests that (1) change the web administration password, (2) upload applications, and perform unspecified other administrative actions, as demonstrated by (3) a Shutdown request to console/portal//Server/Shutdown.","exploit_maturity":"Working exploit published","published":"2009-04-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2009-0038","description":"Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) description parameter to console/portal/Server/Monitoring; or (5) the PATH_INFO to the default URI under console/portal/.","exploit_maturity":"Working exploit published","published":"2009-04-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2009-1014","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1013.","exploit_maturity":"No public exploit","published":"2009-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-1013","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1014.","exploit_maturity":"No public exploit","published":"2009-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-0999","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-0998","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS - eBenefits component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-0995","description":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 allows remote attackers to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-0982","description":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote authenticated users to affect integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-04-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-1275","description":"Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information via unspecified vectors, related to the (1) tiles:putAttribute and (2) tiles:insertTemplate JSP tags.","exploit_maturity":"No public exploit","published":"2009-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2008-6682","description":"Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via vectors associated with improper handling of (1) \" (double quote) characters in the href attribute of an s:a tag and (2) parameters in the action attribute of an s:url tag.","exploit_maturity":"No public exploit","published":"2009-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2008-2025","description":"Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2.9-198.2 on SUSE openSUSE 11.0, and before 1.2.9-162.163.2 on SUSE openSUSE 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to \"insufficient quoting of parameters.\"","exploit_maturity":"No public exploit","published":"2009-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2007-6726","description":"Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) xip_client.html and (2) xip_server.html in src/io/.","exploit_maturity":"No public exploit","published":"2009-04-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-0892","description":"The administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3 allows attackers to hijack user sessions in \"specific scenarios\" related to a forced logout.","exploit_maturity":"No public exploit","published":"2009-03-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-1106","description":"The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948.","exploit_maturity":"No public exploit","published":"2009-03-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-1101","description":"Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (probably resource consumption) for a JAX-WS service endpoint via a connection without any data, which triggers a file descriptor \"leak.\"","exploit_maturity":"No public exploit","published":"2009-03-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-1100","description":"Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and (1) \"limits on Font creation,\" aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.","exploit_maturity":"No public exploit","published":"2009-03-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-1093","description":"LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).","exploit_maturity":"No public exploit","published":"2009-03-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-0891","description":"The Web Services Security component in IBM WebSphere Application Server 7.0 before Fix Pack 1 (7.0.0.1), 6.1 before Fix Pack 23 (6.1.0.23),and 6.0.2 before Fix Pack 33 (6.0.2.33) does not properly enforce (1) nonce and (2) timestamp expiration values in WS-Security bindings as stored in the com.ibm.wsspi.wssecurity.core custom property, which allows remote authenticated users to conduct session hijacking attacks.","exploit_maturity":"No public exploit","published":"2009-03-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-6505","description":"Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote attackers to read arbitrary files via a ..%252f (encoded dot dot slash) in a URI with a /struts/ path, related to (1) FilterDispatcher in 2.0.x and (2) DefaultStaticContentLoader in 2.1.x.","exploit_maturity":"Working exploit published","published":"2009-03-23","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2008-6504","description":"ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Object-Graph Navigation Language (OGNL) statements and modify server-side context objects, as demonstrated by use of a \\u0023 representation for the # character.","exploit_maturity":"Working exploit published","published":"2009-03-23","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2009-0856","description":"Multiple cross-site scripting (XSS) vulnerabilities in sample applications in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, and 6.1 before 6.1.0.23 on z/OS, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2009-03-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-0855","description":"Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"Working exploit published","published":"2009-03-09","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2009-0781","description":"Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\"","exploit_maturity":"No public exploit","published":"2009-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-0027","description":"The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request.","exploit_maturity":"No public exploit","published":"2009-03-09","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2009-0506","description":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1 and 6.0.2 before 6.0.2.33 on z/OS, when CSIv2 Identity Assertion is enabled and Enterprise JavaBeans (EJB) interaction occurs between a WAS 6.1 instance and a WAS pre-6.1 instance, allows local users to have an unknown impact via vectors related to (1) use of the wrong subject and (2) multiple CBIND checks.","exploit_maturity":"No public exploit","published":"2009-02-25","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-4285","description":"Unspecified vulnerability in the Performance Monitoring Infrastructure (PMI) feature in the Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19, when a component statistic is enabled, allows attackers to cause a denial of service (daemon crash) via vectors related to \"a gradual degradation in performance.\"","exploit_maturity":"No public exploit","published":"2009-02-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-0438","description":"IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows allows remote attackers to bypass \"Authorization checking\" and obtain sensitive information from JSP pages via a crafted request. NOTE: this is probably a duplicate of CVE-2008-5412.","exploit_maturity":"No public exploit","published":"2009-02-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-0435","description":"Unspecified vulnerability in the IBM Asynchronous I/O (aka AIO or libibmaio) library in the Java Message Service (JMS) component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.17 on AIX 5.3 allows attackers to cause a denial of service (daemon crash) via vectors related to the aio_getioev2 and getEvent methods.","exploit_maturity":"No public exploit","published":"2009-02-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-0432","description":"The installation process for the File Transfer servlet in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19 does not enable the secure version, which allows remote attackers to obtain sensitive information via unspecified vectors.","exploit_maturity":"No public exploit","published":"2009-02-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-4284","description":"Open redirect vulnerability in the ibm_security_logout servlet in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.x versions, 6.0.x before 6.0.2.33, and 6.1.x before 6.1.0.23 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage feature.","exploit_maturity":"No public exploit","published":"2009-02-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-0278","description":"Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the (1) WEB-INF or (2) META-INF directory via a malformed request.","exploit_maturity":"No public exploit","published":"2009-01-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2009-0026","description":"Multiple cross-site scripting (XSS) vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to (1) search.jsp or (2) swr.jsp.","exploit_maturity":"Working exploit published","published":"2009-01-21","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2008-5463","description":"Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-01-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5458","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10 and CU2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-01-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5456","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-01-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5455","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS - ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-01-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5454","description":"Unspecified vulnerability in the iProcurement component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-01-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5452","description":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-01-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5451","description":"Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.5 allows remote authenticated users to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-01-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5447","description":"Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-01-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-4007","description":"Unspecified vulnerability in the PeopleSoft Enterprise Components component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2009-01-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5720","description":"Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.","exploit_maturity":"No public exploit","published":"2008-12-26","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2008-5413","description":"PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows attackers to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: this is probably a duplicate of CVE-2009-0434.","exploit_maturity":"No public exploit","published":"2008-12-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5411","description":"IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 sends SSL traffic over \"unsecured TCP,\" which makes it easier for remote attackers to obtain sensitive information by sniffing the network.","exploit_maturity":"No public exploit","published":"2008-12-10","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5360","description":"Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors.","exploit_maturity":"No public exploit","published":"2008-12-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5350","description":"Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applications and applets to list the contents of the operating user's directory via unknown vectors.","exploit_maturity":"No public exploit","published":"2008-12-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5342","description":"Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.","exploit_maturity":"No public exploit","published":"2008-12-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5341","description":"Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.","exploit_maturity":"No public exploit","published":"2008-12-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5339","description":"Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via unknown vectors, aka CR 6727079.","exploit_maturity":"No public exploit","published":"2008-12-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-5266","description":"Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.1_01 build b09d-fcs and 9.1_02 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a different vector than CVE-2008-2751.","exploit_maturity":"Working exploit published","published":"2008-11-28","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2008-4679","description":"The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when Certificate Store Collections is configured to use Certificate Revocation Lists (CRL), does not call the setRevocationEnabled method on the PKIXBuilderParameters object, which prevents the \"Java security method\" from checking the revocation status of X.509 certificates and allows remote attackers to bypass intended access restrictions via a SOAP message with a revoked certificate.","exploit_maturity":"No public exploit","published":"2008-10-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-4003","description":"Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2008-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-4001","description":"Unspecified vulnerability in the PeopleSoft Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne EP 8.9 and EP 9.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2008-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-4000","description":"Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the Oracle October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue allows bypass of the lockout mechanism using brute force guessing of credentials and a response discrepancy information leak when the password is correct.","exploit_maturity":"No public exploit","published":"2008-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-3998","description":"Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.","exploit_maturity":"No public exploit","published":"2008-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-3988","description":"Unspecified vulnerability in the iSupplier Portal component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2008-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-3985","description":"Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.4 allows remote attackers to affect confidentiality via unknown vectors.","exploit_maturity":"No public exploit","published":"2008-10-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-3271","description":"Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a \"synchronization problem\" and lack of thread safety, and related to RemoteFilterValve, RemoteAddrValve, and RemoteHostValve.","exploit_maturity":"No public exploit","published":"2008-10-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-3519","description":"The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP), possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain sensitive information (non-EJB classes) via a download request, a different vulnerability than CVE-2008-3273.","exploit_maturity":"No public exploit","published":"2008-09-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2938","description":"Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.","exploit_maturity":"Working exploit published","published":"2008-08-13","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2008-2370","description":"Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.","exploit_maturity":"Working exploit published","published":"2008-08-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2008-1232","description":"Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.","exploit_maturity":"Working exploit published","published":"2008-08-04","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2008-3236","description":"Unspecified vulnerability in Wsadmin in the System Management/Repository component in IBM WebSphere Application Server (WAS) 5.1 before 5.1.1.19 allows attackers to obtain sensitive information via vectors related to \"previously encrypted properties\" that are not encrypted.","exploit_maturity":"No public exploit","published":"2008-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2622","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, and CVE-2008-2621.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2621","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, and CVE-2008-2622.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2620","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2621, and CVE-2008-2622.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2618","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2620, CVE-2008-2621, and CVE-2008-2622.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2617","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2618, CVE-2008-2620, CVE-2008-2621, and CVE-2008-2622.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2616","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, CVE-2008-2621, and CVE-2008-2622.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2615","description":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, CVE-2008-2621, and CVE-2008-2622.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2612","description":"Unspecified vulnerability in the Hyperion BI Plus component in Oracle Application Server 8.3.2.4, 8.5.0.3, 9.2.0.3, 9.2.1.0, and 9.3.1.0 has unknown impact and remote attack vectors.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2610","description":"Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2606","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2586.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2601","description":"Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2596","description":"Unspecified vulnerability in the Mobile Application Server component in Oracle E-Business Suite 12.0.3 has unknown impact and remote authenticated attack vectors.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2586","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2606.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2585","description":"Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2582","description":"Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2581","description":"Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors related to UDDI Explorer.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2580","description":"Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0 has unknown impact and remote attack vectors.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2578","description":"Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 and 9.2 MP1 has unknown impact and local attack vectors.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2577","description":"Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2 MP1 has unknown impact and remote authenticated attack vectors.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2576","description":"Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2, 9.1, 9.0, and 8.1 SP6 has unknown impact and local attack vectors.","exploit_maturity":"No public exploit","published":"2008-07-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-3114","description":"Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR 6704074.","exploit_maturity":"No public exploit","published":"2008-07-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-3110","description":"Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to obtain sensitive information by using an applet to read information from another applet.","exploit_maturity":"No public exploit","published":"2008-07-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-3106","description":"Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving processing of XML data by an untrusted (1) application or (2) applet, a different vulnerability than CVE-2008-3105.","exploit_maturity":"No public exploit","published":"2008-07-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-3104","description":"Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allow remote attackers to violate the security model for an applet's outbound connections by connecting to localhost services running on the machine that loaded the applet.","exploit_maturity":"No public exploit","published":"2008-07-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-2751","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.1_01 allow remote attackers to inject arbitrary web script or HTML via the (1) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, (2) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType, (3) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass, or (4) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc parameter to (a) resourceNode/customResourceNew.jsf; the (5) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, (6) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType, (7) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass, (8) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiLookupProp:jndiLookup, or (9) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc parameter to (b) resourceNode/externalResourceNew.jsf; the (10) propertyForm:propertySheet:propertSectionTextField:jndiProp:Jndi, (11) propertyForm:propertySheet:propertSectionTextField:nameProp:name, or (12) propertyForm:propertySheet:propertSectionTextField:descProp:desc parameter to (c) resourceNode/jmsDestinationNew.jsf; the (13) propertyForm:propertySheet:generalPropertySheet:jndiProp:Jndi or (14) propertyForm:propertySheet:generalPropertySheet:descProp:cd parameter to (d) resourceNode/jmsConnectionNew.jsf; the (15) propertyForm:propertySheet:propertSectionTextField:jndiProp:jnditext or (16) propertyForm:propertySheet:propertSectionTextField:descProp:desc parameter to (e) resourceNode/jdbcResourceNew.jsf; the (17) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:nameProp:name, (18) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:classNameProp:classname, or (19) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:loadOrderProp:loadOrder parameter to (f) applications/lifecycleModulesNew.jsf; or the (20) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:jndiProp:name, (21) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:resTypeProp:resType, or (22) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:dbProp:db parameter to (g) resourceNode/jdbcConnectionPoolNew1.jsf.","exploit_maturity":"Working exploit published","published":"2008-06-18","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2008-2550","description":"Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header.","exploit_maturity":"No public exploit","published":"2008-06-04","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-1947","description":"Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.","exploit_maturity":"No public exploit","published":"2008-06-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2008-2120","description":"Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote attackers to obtain source code of JSP files via unknown vectors.","exploit_maturity":"No public exploit","published":"2008-05-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-1811","description":"Unspecified vulnerability in Oracle Application Express 3.0.1 has unspecified impact and remote authenticated attack vectors related to flows_030000.wwv_execute_immediate, aka APEX01. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that APEX01 is for insufficient authorization checks for SQL commands in the run_ddl function in flows_030000.wwv_execute_immediate, allowing privilege escalation by certain non-DBA remote authenticated users.","exploit_maturity":"No public exploit","published":"2008-04-16","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-1753","description":"Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510.","exploit_maturity":"No public exploit","published":"2008-04-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2008-1728","description":"ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5 allows remote authenticated users to cause a denial of service (daemon outage) by triggering large outgoing queues without reading messages.","exploit_maturity":"No public exploit","published":"2008-04-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2008-1510","description":"Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter.","exploit_maturity":"Working exploit published","published":"2008-03-25","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2008-1357","description":"Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to UDP port 8082. NOTE: this issue only exists when the debug level is 8.","exploit_maturity":"Working exploit published","published":"2008-03-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2008-1301","description":"Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter.","exploit_maturity":"Working exploit published","published":"2008-03-12","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2008-1300","description":"Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a different vector than CVE-2008-1045.","exploit_maturity":"Working exploit published","published":"2008-03-12","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2008-1285","description":"Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.","exploit_maturity":"No public exploit","published":"2008-03-11","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2008-1194","description":"Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to cause a denial of service (crash) via unknown vectors.","exploit_maturity":"No public exploit","published":"2008-03-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-1192","description":"Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier, and 1.3.1_21 and earlier; allows remote attackers to bypass the same origin policy and \"execute local applications\" via unknown vectors.","exploit_maturity":"No public exploit","published":"2008-03-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-1191","description":"Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create arbitrary files via an untrusted application, a different issue than CVE-2008-1190, aka \"The fifth issue.\"","exploit_maturity":"No public exploit","published":"2008-03-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-1187","description":"Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to cause a denial of service (JRE crash) and possibly execute arbitrary code via unknown vectors related to XSLT transforms.","exploit_maturity":"No public exploit","published":"2008-03-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2008-1045","description":"Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree_files.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the resource parameter.","exploit_maturity":"Working exploit published","published":"2008-02-27","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2008-0002","description":"Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.","exploit_maturity":"No public exploit","published":"2008-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2007-6286","description":"Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of \"a duplicate copy of one of the recent requests,\" as demonstrated by using netcat to send the empty request.","exploit_maturity":"No public exploit","published":"2008-02-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2007-5333","description":"Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (\") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks. NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.","exploit_maturity":"Working exploit published","published":"2008-02-12","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2008-0128","description":"The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.","exploit_maturity":"No public exploit","published":"2008-01-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-0012","description":"Sun JRE 5.0 before update 14 allows remote attackers to cause a denial of service (Internet Explorer crash) via an object tag with an encoded applet and an undefined name attribute, which triggers a NULL pointer dereference in jpiexp32.dll when the applet is decoded and passed to the JVM.","exploit_maturity":"No public exploit","published":"2008-01-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-6672","description":"Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) characters in the URI.","exploit_maturity":"No public exploit","published":"2008-01-08","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2007-5342","description":"The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.","exploit_maturity":"No public exploit","published":"2007-12-27","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2007-6382","description":"The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method.","exploit_maturity":"No public exploit","published":"2007-12-15","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2007-5615","description":"CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.","exploit_maturity":"No public exploit","published":"2007-12-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2007-5613","description":"Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.","exploit_maturity":"No public exploit","published":"2007-12-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2007-5944","description":"Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1.1.4 through 5.1.1.16 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. NOTE: this might be the same issue as CVE-2006-3918, but there are insufficient details to be sure.","exploit_maturity":"Working exploit published","published":"2007-11-14","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2007-5799","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote attackers to perform some actions as WAS UDDI users via the (1) keyField, (2) nameField, (3) valueField, and (4) frameReturn parameters.","exploit_maturity":"No public exploit","published":"2007-11-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-5798","description":"Multiple cross-site scripting (XSS) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote attackers to inject arbitrary web script or HTML via the (1) keyField, (2) nameField, (3) valueField, and (4) frameReturn parameters.","exploit_maturity":"No public exploit","published":"2007-11-03","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-5533","description":"Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.14, 8.48.13, 8.49.05 has unknown impact and remote attack vectors, aka PSE02.","exploit_maturity":"No public exploit","published":"2007-10-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-5240","description":"Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner by creating a window larger than the workstation screen.","exploit_maturity":"No public exploit","published":"2007-10-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-5239","description":"Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for untrusted (1) applications and (2) applets, which allows user-assisted remote attackers to copy or rename arbitrary files when local users perform drag-and-drop operations from the untrusted application or applet window onto certain types of desktop applications.","exploit_maturity":"No public exploit","published":"2007-10-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-5236","description":"Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read local files via an untrusted application.","exploit_maturity":"No public exploit","published":"2007-10-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-5232","description":"Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when applet caching is enabled, allows remote attackers to violate the security model for an applet's outbound connections via a DNS rebinding attack.","exploit_maturity":"No public exploit","published":"2007-10-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-5153","description":"Unspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 8.x container, allows remote attackers to execute arbitrary code via unspecified vectors.","exploit_maturity":"No public exploit","published":"2007-10-01","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-7223","description":"PreviewAction in XWiki 0.9.543 through 0.9.1252 does not set the Author field to the identity of the user who last modified a document, which allows remote authenticated users without programming rights to execute arbitrary code by selecting a document whose author has programming rights, modifying this document to contain a script, and previewing without saving the document.","exploit_maturity":"No public exploit","published":"2007-09-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2007-4833","description":"Unspecified vulnerability in the Edge Component in IBM WebSphere Application Server (WAS) 6.1 before Fix Pack 11 (6.1.0.11) has unknown impact and attack vectors, aka PK44789.","exploit_maturity":"No public exploit","published":"2007-09-12","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-4724","description":"Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.","exploit_maturity":"No public exploit","published":"2007-09-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2007-4556","description":"Struts support in OpenSymphony XWork before 1.2.3, and 2.x before 2.0.4, as used in WebWork and Apache Struts, recursively evaluates all input as an Object-Graph Navigation Language (OGNL) expression when altSyntax is enabled, which allows remote attackers to cause a denial of service (infinite loop) or execute arbitrary code via form input beginning with a \"%{\" sequence and ending with a \"}\" character.","exploit_maturity":"Working exploit published","published":"2007-08-28","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2007-4511","description":"The Sun Admin Console in Sun Application Server 9.0_0.1 does not apply certain configuration changes persistently, which causes the (1) SSL and (2) SSL_MutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass intended policy.","exploit_maturity":"No public exploit","published":"2007-08-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-3386","description":"Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.","exploit_maturity":"Working exploit published","published":"2007-08-14","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2007-3385","description":"Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \\\" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.","exploit_maturity":"No public exploit","published":"2007-08-14","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2007-3382","description":"Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes (\"'\") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks.","exploit_maturity":"Working exploit published","published":"2007-08-14","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2007-3384","description":"Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Value field, related to error messages.","exploit_maturity":"No public exploit","published":"2007-08-08","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2007-4025","description":"Unspecified vulnerability in Sun Java System (SJS) Application Server 8.1 through 9.0 before 20070724 on Windows allows remote attackers to obtain JSP source code via unspecified vectors.","exploit_maturity":"No public exploit","published":"2007-07-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-3383","description":"Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (examples/jsp/mail/sendmail.jsp) in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML via the From field and possibly other fields, related to generation of error messages.","exploit_maturity":"No public exploit","published":"2007-07-25","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2007-3922","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to violate the security model for an applet's outbound connections by connecting to certain localhost services running on the machine that loaded the applet.","exploit_maturity":"No public exploit","published":"2007-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-3870","description":"Multiple unspecified vulnerabilities in the Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 Bundle 11 allow local users to have unknown impact via unknown vectors, aka (1) PSE06 and (2) PSE07.","exploit_maturity":"No public exploit","published":"2007-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-3868","description":"Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote authenticated users or attackers to have an unknown impact via multiple vectors, aka (1) PSE01, (2) PSE02, and (3) PSE03.","exploit_maturity":"No public exploit","published":"2007-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-3854","description":"Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the Advanced Queuing component (DB02) and (2) MDSYS.MD in the Spatial component (DB12). NOTE: Oracle has not disputed reliable researcher claims that DB02 is for SQL injection and DB12 is for a buffer overflow.","exploit_maturity":"No public exploit","published":"2007-07-18","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2007-3655","description":"Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP file.","exploit_maturity":"Working exploit published","published":"2007-07-10","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2006-7217","description":"Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode.","exploit_maturity":"No public exploit","published":"2007-07-05","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2006-7216","description":"Apache Derby before 10.2.1.6 does not determine privilege requirements for lock table statements at compilation time, and consequently does not enforce privilege requirements at execution time, which allows remote authenticated users to lock arbitrary tables.","exploit_maturity":"No public exploit","published":"2007-07-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-3503","description":"The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2007-06-30","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-3397","description":"The web container in IBM WebSphere Application Server (WAS) before 6.0.2.21, and 6.1.x before 6.1.0.9, sends response data intended for a different request in certain circumstances after a closed connection error, which might allow remote attackers to obtain sensitive information.","exploit_maturity":"No public exploit","published":"2007-06-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-3265","description":"Cross-site scripting (XSS) vulnerability in the Samples component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","exploit_maturity":"No public exploit","published":"2007-06-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-2449","description":"Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a \"snp/snoop.jsp;\" sequence.","exploit_maturity":"Working exploit published","published":"2007-06-14","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2007-2789","description":"The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.","exploit_maturity":"No public exploit","published":"2007-05-22","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-1355","description":"Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23, and 6.0.0 through 6.0.10 allow remote attackers to inject arbitrary web script or HTML via the test parameter and unspecified vectors.","exploit_maturity":"Working exploit published","published":"2007-05-21","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2006-7196","description":"Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly unspecified other vectors. NOTE: this may be related to CVE-2006-0254.1.","exploit_maturity":"Working exploit published","published":"2007-05-10","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2006-7195","description":"Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.","exploit_maturity":"No public exploit","published":"2007-05-10","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2007-2353","description":"Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message.","exploit_maturity":"Working exploit published","published":"2007-04-30","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2007-1944","description":"The Java Message Service (JMS) in IBM WebSphere Application Server (WAS) before 6.1.0.7 allows attackers to cause a denial of service via unknown vectors involving the \"double release [of] a bytebuffer input stream,\" possibly a double free vulnerability.","exploit_maturity":"No public exploit","published":"2007-04-11","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-7166","description":"IBM WebSphere Application Server (WAS) 5.1.1.9 and earlier allows remote attackers to obtain JSP source code and other sensitive information via \"a specific JSP URL.\"","exploit_maturity":"No public exploit","published":"2007-03-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-7165","description":"IBM WebSphere Application Server (WAS) 5.0 through 5.1.1.0 allows remote attackers to obtain JSP source code and other sensitive information via certain \"special URIs.\"","exploit_maturity":"No public exploit","published":"2007-03-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-7164","description":"SimpleFileServlet in IBM WebSphere Application Server 5.0.1 through 5.0.2.7 on Linux and UNIX does not block certain invalid URIs and does not issue a security challenge, which allows remote attackers to read secure files and obtain sensitive information via certain requests.","exploit_maturity":"No public exploit","published":"2007-03-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-7158","description":"Cross-site scripting (XSS) vulnerability in Oracle Application Express (APEX) before 2.2.1, aka Oracle HTML DB, allows remote attackers to inject arbitrary web script or HTML via the NOTIFICATION_MSG parameter. NOTE: it is likely that this issue overlaps one of the identifiers in CVE-2006-5351.","exploit_maturity":"No public exploit","published":"2007-03-07","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-7138","description":"SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES package for Oracle APEX/HTMLDB before 2.2 allows remote authenticated users to execute arbitrary SQL by modifying the P_LOV parameter and calculating a matching MD5 checksum for the P_LOV_CHECKSUM parameter. NOTE: it is likely that this issue is subsumed by CVE-2006-5351, but due to lack of details from Oracle, this cannot be proven.","exploit_maturity":"No public exploit","published":"2007-03-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2006-6969","description":"Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using java.util.random, which makes it easier for remote attackers to guess a session identifier through brute force attacks, bypass authentication requirements, and possibly conduct cross-site request forgery attacks.","exploit_maturity":"No public exploit","published":"2007-02-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2007-0297","description":"Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown impact and attack vectors in PeopleTools, aka PSE03.","exploit_maturity":"Working exploit published","published":"2007-01-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2007-0293","description":"Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors related to (1) Oracle Agent (EM03) and (2) EM04 and (3) EM05 in Enterprise Manager Console. NOTE: EM05 might be related to CVE-2007-0222.","exploit_maturity":"No public exploit","published":"2007-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-0291","description":"Unspecified vulnerability in Oracle E-Business Suite and Applications 6.2.3 has unknown impact and attack vectors related to Oracle Exchange, aka APPS02.","exploit_maturity":"No public exploit","published":"2007-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-0290","description":"Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors related to (1) Application Object Library (APPS01), (2) Human Resources (APPS03), (3) Payables (APPS04), (4) Trading Community Architecture (APPS05), and (5) Web Applications Desktop Integrator (APPS06).","exploit_maturity":"No public exploit","published":"2007-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-0285","description":"Unspecified vulnerability in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; Collaboration Suite 9.0.4.2 and 10.1.2; and E-Business Suite and Applications 11.5.10CU2 has unknown impact and attack vectors related to Oracle Reports Developer, aka REP01.","exploit_maturity":"No public exploit","published":"2007-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-0281","description":"Multiple unspecified vulnerabilities in Oracle HTTP Server 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3; Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.1, 10.1.2.0.2, 10.1.2.1, and 10.1.3.0; and Collaboration Suite 9.0.4.2 and 10.1.2; have unknown impact and attack vectors related to the Oracle HTTP Server, aka (1) OHS03 and (2) OHS04.","exploit_maturity":"No public exploit","published":"2007-01-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2007-0185","description":"Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch.","exploit_maturity":"No public exploit","published":"2007-01-12","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2006-6737","description":"Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 5 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_10 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allows attackers to use untrusted applets to \"access data in other applets,\" aka \"The first issue.\"","exploit_maturity":"No public exploit","published":"2006-12-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-6736","description":"Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 6 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allows attackers to use untrusted applets to \"access data in other applets,\" aka \"The second issue.\"","exploit_maturity":"No public exploit","published":"2006-12-26","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-6637","description":"The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled to true and servlet caching is enabled, allows remote attackers to obtain JSP source code and other sensitive information via \"specific requests.\"","exploit_maturity":"No public exploit","published":"2006-12-19","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-6276","description":"HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting (XSS), and poison web caches via unspecified attack vectors.","exploit_maturity":"No public exploit","published":"2006-12-04","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-6009","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) Swing library in JDK and JRE 5.0 Update 7 and earlier allows attackers to obtain certain information via unknown attack vectors, related to an untrusted applet accessing data in other applets.","exploit_maturity":"No public exploit","published":"2006-11-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-5599","description":"Cross-site scripting (XSS) vulnerability in Oracle Application Express (formerly HTML DB) before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the WWV_FLOW_ITEM_HELP package. NOTE: it is likely that this issue overlaps one of the Oracle VulnIDs covered by CVE-2006-5351. Oracle has not publicly disputed claims by a reliable researcher that this has been fixed by the October 2006 CPU.","exploit_maturity":"No public exploit","published":"2006-10-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-4223","description":"IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to \"JSP source code exposure\" (PK23475), which occurs when ibm-web-ext.xmi sets fileServingEnabled to true or ExtendedDocumentRoot is used to place a JSP outside a WAR.file; (3) the First Failure Data Capture (ffdc) log file (PK24834); and (4) traces (PK25568), a different issue than CVE-2006-4137.","exploit_maturity":"No public exploit","published":"2006-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-4222","description":"Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have unspecified vectors and impact, including (1) an \"authority problem\" in ThreadIdentitySupport as identified by PK25199, and \"Potential security exposure\" issues as identified by (2) PK22747, (3) PK24334, (4) PK25740, and (5) PK26123.","exploit_maturity":"No public exploit","published":"2006-08-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-4137","description":"IBM WebSphere Application Server before 6.1.0.1 allows attackers to obtain sensitive information via unspecified vectors related to (1) the log file, (2) \"script generated syntax on wsadmin command line,\" and (3) traces.","exploit_maturity":"No public exploit","published":"2006-08-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-3936","description":"system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using index.jsp.","exploit_maturity":"No public exploit","published":"2006-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2006-3935","description":"system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does not restrict access to administrator functions, which allows remote authenticated users to (1) send broadcast messages to all users (/workplace/broadcast), (2) list all users (/accounts/users), (3) add webusers (/accounts/webusers/new), (4) upload database import and export files (/database/importhttp), (5) upload arbitrary program modules (/modules/modules_import), and (6) read the log file (/workplace/logfileview) by setting the appropriate value for the path parameter in a direct request to admin-main.jsp.","exploit_maturity":"No public exploit","published":"2006-07-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2006-3934","description":"Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to download arbitrary files via an absolute pathname in the filePath parameter.","exploit_maturity":"No public exploit","published":"2006-07-31","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2006-3921","description":"Sun Java System Application Server (SJSAS) 7 through 8.1 and Web Server (SJSWS) 6.0 and 6.1 allows remote authenticated users to read files outside of the \"document root directory\" via a direct request using a UTF-8 encoded URI.","exploit_maturity":"No public exploit","published":"2006-07-28","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-3835","description":"Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.","exploit_maturity":"Working exploit published","published":"2006-07-25","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2006-3720","description":"Unspecified vulnerability in Enterprise Config Management for Oracle Enterprise Manager 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# EM02.","exploit_maturity":"No public exploit","published":"2006-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-3719","description":"Unspecified vulnerability in CORE: Repository for Oracle Enterprise Manager 9.0.1.0 and 9.2.0.1 has unknown impact and attack vectors, aka Oracle Vuln# EM01.","exploit_maturity":"No public exploit","published":"2006-07-21","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-3231","description":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via \"URIs with special characters.\"","exploit_maturity":"No public exploit","published":"2006-06-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-2759","description":"jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.","exploit_maturity":"No public exploit","published":"2006-06-02","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2006-2758","description":"Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL. NOTE: this might be the same issue as CVE-2005-3747.","exploit_maturity":"Working exploit published","published":"2006-06-02","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2006-2501","description":"Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier, and Java System Application Server 7 2004Q2 Standard and Enterprise Edition Update 2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving error messages.","exploit_maturity":"No public exploit","published":"2006-05-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-2435","description":"Unspecified vulnerability in IBM WebSphere Application Server 5.0.2 and earlier, and 5.1.1 and earlier, has unknown impact and attack vectors related to \"Inserting certain script tags in urls [that] may allow unintended execution of scripts.\"","exploit_maturity":"No public exploit","published":"2006-05-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-2434","description":"Unspecified vulnerability in WebSphere 5.1.1 (or any earlier cumulative fix) Common Configuration Mode + CommonArchive and J2EE Models might allow attackers to obtain sensitive information via the trace.","exploit_maturity":"No public exploit","published":"2006-05-17","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-2431","description":"Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitrary web script or HTML via the URI, which is contained in a FAULTACTOR element on this page. NOTE: some sources have reported the element as \"faultfactor,\" but this is likely erroneous.","exploit_maturity":"Working exploit published","published":"2006-05-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2006-2426","description":"Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory.","exploit_maturity":"Working exploit published","published":"2006-05-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2006-1619","description":"IBM WebSphere Application Server 4.0.1 through 4.0.3 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a large header.","exploit_maturity":"No public exploit","published":"2006-04-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-1548","description":"Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message.","exploit_maturity":"No public exploit","published":"2006-03-30","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2006-1093","description":"Unspecified vulnerability in IBM WebSphere 5.0.2.10 through 5.0.2.15 and 5.1.1.4 through 5.1.1.9 allows remote attackers to obtain sensitive information via unknown attack vectors, which causes JSP source code to be revealed.","exploit_maturity":"No public exploit","published":"2006-03-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-0617","description":"Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 5 and earlier allow remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the \"fifth, sixth, and seventh issues.\"","exploit_maturity":"No public exploit","published":"2006-02-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-0616","description":"Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 4 and earlier allows remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the \"fourth issue.\"","exploit_maturity":"No public exploit","published":"2006-02-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-0615","description":"Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 4 and earlier, SDK and JRE 1.4.x through 1.4.2_09 allow remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the \"second and third issues.\"","exploit_maturity":"No public exploit","published":"2006-02-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-0614","description":"Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 3 and earlier, SDK and JRE 1.3.x through 1.3.1_16 and 1.4.x through 1.4.2_08 allows remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the \"first issue.\"","exploit_maturity":"No public exploit","published":"2006-02-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2006-0254","description":"Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.","exploit_maturity":"Working exploit published","published":"2006-01-18","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2005-4849","description":"Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter of the ACCSEC command and (b) the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensitive information.","exploit_maturity":"No public exploit","published":"2005-12-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2005-4838","description":"Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in examples/jsp2/, as demonstrated via script in a request to snp/snoop.jsp. NOTE: other XSS issues in the manager were simultaneously reported, but these require admin access and do not cross privilege boundaries.","exploit_maturity":"No public exploit","published":"2005-12-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2005-4834","description":"IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and other sensitive information, related to incorrect request processing by the web container.","exploit_maturity":"No public exploit","published":"2005-12-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2005-4833","description":"IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Document Root, allows remote attackers to obtain the JSP source code and other sensitive information via \"a specific JSP URL,\" related to lack of normalization of the URL format.","exploit_maturity":"No public exploit","published":"2005-12-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2005-4805","description":"Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Edition Update 2 and earlier, allows remote attackers to obtain the source code for Java Server pages (JSP) via unknown vectors.","exploit_maturity":"No public exploit","published":"2005-12-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2005-4804","description":"Unspecified vulnerability in Sun Java System Application Server Platform Edition and Enterprise Edition 8.1 2005 Q1, and Platform Edition UR1, allows remote attackers to read .jar files via unknown vectors related to deployed web applications.","exploit_maturity":"No public exploit","published":"2005-12-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2005-4703","description":"Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto.","exploit_maturity":"Working exploit published","published":"2005-12-31","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2005-4413","description":"Multiple cross-site scripting (XSS) vulnerabilities in sample scripts in IBM WebSphere Application Server 6 allow remote attackers to inject arbitrary web script or HTML via the (1) E-mail address field to (a) PlantsByWebSphere/login.jsp, (2) message field to (b) TechnologySample/BulletinBoard Script, (3) Email address field to (c) TechnologySamples/Subscription, and the (4) Movie Name, (5) Movie Reviewer, and (6) Movie Review fields to (d) TechnologySamples/MovieReview2_1.","exploit_maturity":"No public exploit","published":"2005-12-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2005-4294","description":"Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the username in the login page.","exploit_maturity":"No public exploit","published":"2005-12-16","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2005-4046","description":"Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Server 7 Standard Edition, as used in multiple web servers, allows remote attackers to conduct man-in-the-middle (MITM) attacks and \"compromise data privacy.\"","exploit_maturity":"No public exploit","published":"2005-12-07","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2005-3747","description":"Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash (\"%5C\") characters. NOTE: this might be the same issue as CVE-2006-2758.","exploit_maturity":"Working exploit published","published":"2005-11-22","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2005-3745","description":"Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message.","exploit_maturity":"Working exploit published","published":"2005-11-22","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2005-3510","description":"Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requests to list a web directory that has a large number of files.","exploit_maturity":"No public exploit","published":"2005-11-06","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2005-3498","description":"IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when session trace is enabled, records a full URL including the queryString in the trace logs when an application encodes a URL, which could allow attackers to obtain sensitive information.","exploit_maturity":"No public exploit","published":"2005-11-04","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2005-2291","description":"Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information.","exploit_maturity":"No public exploit","published":"2005-07-18","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2005-2091","description":"IBM WebSphere 5.1 and WebSphere 5.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes WebSphere to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\"","exploit_maturity":"No public exploit","published":"2005-07-05","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2005-2090","description":"Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\"","exploit_maturity":"No public exploit","published":"2005-07-05","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2005-1112","description":"IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the JSP engine.","exploit_maturity":"Working exploit published","published":"2005-05-02","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2005-1080","description":"Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.","exploit_maturity":"No public exploit","published":"2005-05-02","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2005-0808","description":"Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 packet to TCP port 8007.","exploit_maturity":"No public exploit","published":"2005-05-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2005-0742","description":"Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.","exploit_maturity":"No public exploit","published":"2005-05-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2005-0425","description":"Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine.","exploit_maturity":"No public exploit","published":"2005-05-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2005-0223","description":"The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java Virtual Machine hang) via object deserialization.","exploit_maturity":"No public exploit","published":"2005-05-02","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2005-0471","description":"Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers to write arbitrary files to known locations and facilitates the exploitation of vulnerabilities in applications that rely on unpredictable file names.","exploit_maturity":"No public exploit","published":"2005-03-14","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2004-2650","description":"Spooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error conditions in the retrieve function, which prevents a lock from being released and causes a memory leak.","exploit_maturity":"No public exploit","published":"2004-12-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2004-2540","description":"readObject in (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.0 through 1.4.2_05 allows remote attackers to cause a denial of service (JVM unresponsive) via crafted serialized data.","exploit_maturity":"No public exploit","published":"2004-12-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2004-2381","description":"HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.","exploit_maturity":"No public exploit","published":"2004-12-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2004-2320","description":"The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.","exploit_maturity":"No public exploit","published":"2004-12-31","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2004-2216","description":"Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server 7 Update 4 and earlier, allows remote attackers to cause a denial of service (crash) via a malformed client certificate.","exploit_maturity":"No public exploit","published":"2004-12-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2004-2115","description":"Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.","exploit_maturity":"Working exploit published","published":"2004-12-31","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2004-1503","description":"Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service (Java exception and failed DNS requests) via a large number of DNS requests, which causes the xid variable to wrap around and become negative.","exploit_maturity":"No public exploit","published":"2004-12-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2004-0651","description":"Unknown vulnerability in Sun Java Runtime Environment (JRE) 1.4.2 through 1.4.2_03 allows remote attackers to cause a denial of service (virtual machine hang).","exploit_maturity":"No public exploit","published":"2004-08-06","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2004-1369","description":"The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.","exploit_maturity":"No public exploit","published":"2004-08-04","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2004-1367","description":"Oracle 10g Database Server, when installed with a password that contains an exclamation point (\"!\") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SYS or SYSTEM accounts, which may have been installed with the same password.","exploit_maturity":"No public exploit","published":"2004-08-04","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2004-1366","description":"Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.","exploit_maturity":"No public exploit","published":"2004-08-04","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2004-1365","description":"Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.","exploit_maturity":"No public exploit","published":"2004-08-04","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2004-0095","description":"McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow.","exploit_maturity":"Working exploit published","published":"2004-02-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2003-1301","description":"Sun Java Runtime Environment (JRE) 1.x before 1.4.2_11 and 1.5.x before 1.5.0_06, and as used in multiple web browsers, allows remote attackers to cause a denial of service (application crash) via deeply nested object arrays, which are not properly handled by the garbage collector and trigger invalid memory accesses.","exploit_maturity":"No public exploit","published":"2003-12-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2003-1156","description":"Java Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.2_02 allows local users to overwrite arbitrary files via a symlink attack on (1) unpack.log, as created by the unpack program, or (2) .mailcap1 and .mime.types1, as created by the RPM program.","exploit_maturity":"No public exploit","published":"2003-12-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2003-1116","description":"The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing requests to the TNS Listener.","exploit_maturity":"No public exploit","published":"2003-12-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2003-0866","description":"The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.","exploit_maturity":"Working exploit published","published":"2003-11-17","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2002-1567","description":"Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.","exploit_maturity":"Working exploit published","published":"2003-10-06","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2003-0633","description":"Multiple vulnerabilities in aoljtest.jsp of Oracle Applications AOL/J Setup Test Suite in Oracle E-Business Suite 11.5.1 through 11.5.8 allow a remote attacker to obtain sensitive information without authentication, such as the GUEST user password and the application server security key.","exploit_maturity":"No public exploit","published":"2003-08-27","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2003-0610","description":"Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request.","exploit_maturity":"No public exploit","published":"2003-08-27","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2002-1533","description":"Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).","exploit_maturity":"Working exploit published","published":"2003-03-31","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2003-0045","description":"Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp.","exploit_maturity":"No public exploit","published":"2003-02-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2003-0044","description":"Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.","exploit_maturity":"No public exploit","published":"2003-02-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2003-0043","description":"Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.","exploit_maturity":"No public exploit","published":"2003-02-07","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2003-0042","description":"Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.","exploit_maturity":"Working exploit published","published":"2003-02-07","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2002-2072","description":"java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service (JVM crash) via a Java program that calls the doPrivileged method with a null argument.","exploit_maturity":"Working exploit published","published":"2002-12-31","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2002-2009","description":"Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) +/, (2) \u003e/, (3) \u003c/, and (4) %20/, which leaks the pathname in an error message.","exploit_maturity":"No public exploit","published":"2002-12-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2002-2008","description":"Apache Tomcat 4.0.3 for Windows allows remote attackers to obtain the web root path via an HTTP request for a resource that does not exist, such as lpt9, which leaks the information in an error message.","exploit_maturity":"No public exploit","published":"2002-12-31","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2002-2007","description":"The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3) examples/jsp directories, or the (4) test/realPath.jsp servlet, which leaks pathnames in error messages.","exploit_maturity":"Working exploit published","published":"2002-12-31","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2002-2006","description":"The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.","exploit_maturity":"Working exploit published","published":"2002-12-31","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2002-1987","description":"Directory traversal vulnerability in view_source.jsp in Resin 2.1.2 allows remote attackers to read arbitrary files via a \"\\..\" (backslash dot dot).","exploit_maturity":"No public exploit","published":"2002-12-31","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2002-1895","description":"The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service (crash) via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN.","exploit_maturity":"No public exploit","published":"2002-12-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2002-1666","description":"Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/SQL procedures by modifying the Oracle Applications URL.","exploit_maturity":"No public exploit","published":"2002-12-31","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2002-1153","description":"IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as \"Host\".","exploit_maturity":"No public exploit","published":"2002-10-11","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2002-1148","description":"The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet.","exploit_maturity":"Working exploit published","published":"2002-10-11","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2002-1042","description":"Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\\ (dot-dot backslash) sequences in the NS-query-pat parameter.","exploit_maturity":"Working exploit published","published":"2002-10-04","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2002-0936","description":"The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).","exploit_maturity":"Working exploit published","published":"2002-10-04","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2002-0935","description":"Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of requests to the server with null characters, which causes the working threads to hang.","exploit_maturity":"No public exploit","published":"2002-10-04","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2002-1640","description":"Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2) the test parameter to the oracle.apps.cz.servlet.UiServlet servlet.","exploit_maturity":"No public exploit","published":"2002-04-01","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2000-1210","description":"Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp.","exploit_maturity":"No public exploit","published":"2002-03-22","resolved":"MITIGATED-BY-RASP","severity":"Medium"}, {"cve_id":"CVE-2001-1189","description":"IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script.","exploit_maturity":"No public exploit","published":"2001-12-13","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2001-0917","description":"Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.","exploit_maturity":"No public exploit","published":"2001-11-22","resolved":"NO-EXPLOIT-PUBLISHED","severity":"Medium"}, {"cve_id":"CVE-2001-0590","description":"Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0).","exploit_maturity":"Working exploit published","published":"2001-08-02","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2001-0390","description":"IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters.","exploit_maturity":"Working exploit published","published":"2001-07-02","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2001-0389","description":"IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument.","exploit_maturity":"No public exploit","published":"2001-07-02","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2000-1099","description":"Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities.","exploit_maturity":"No public exploit","published":"2001-01-09","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-2000-0760","description":"The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.","exploit_maturity":"Working exploit published","published":"2000-10-20","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2000-0759","description":"Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.","exploit_maturity":"Working exploit published","published":"2000-10-20","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2000-0652","description":"IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the \"/servlet/file\" string.","exploit_maturity":"Working exploit published","published":"2000-07-24","resolved":"MITIGATION-CANDIDATE","severity":"Medium"}, {"cve_id":"CVE-2000-0672","description":"The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory.","exploit_maturity":"No public exploit","published":"2000-07-20","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}, {"cve_id":"CVE-1999-1068","description":"Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request.","exploit_maturity":"No public exploit","published":"1997-07-23","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"} ]