WID-SEC-W-2024-0118

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Oracle PeopleSoft: Mehrere Schwachstellen

view advisory published 2024-01-16

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle PeopleSoft ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2023-44483USmedium6.5—
All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclos…
CVE-2023-5072UShigh7.5—
Denial of Service in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being…
CVE-2023-44487UShigh7.5OT criticalKEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through…
CVE-2023-2976UShigh7.1—
Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows o…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan