WID-SEC-W-2023-1013

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Oracle iLearning: Mehrere Schwachstellen

view advisory published 2023-04-18

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Oracle iLearning ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2022-23437USmedium6.5—
There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an…
CVE-2021-2351USmedium5.1OT elevated—
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulne…
CVE-2020-17521USmedium5.5OT elevated—
Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now supersede…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan