WID-SEC-W-2024-0105

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Oracle Construction and Engineering: Mehrere Schwachstellen

view advisory published 2024-01-16

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Construction and Engineering ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2023-5072UShigh7.5—
Denial of Service in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being…
CVE-2023-44981UScritical9.1—
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper (quorum.auth.enableSasl=true), the au…
CVE-2023-42503USmedium5.5—
Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.…
CVE-2023-2976UShigh7.1—
Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows o…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan