WID-SEC-W-2024-3217

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Oracle Utilities Applications: Mehrere Schwachstellen

view advisory published 2024-10-15

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Utilities Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2024-29025US——
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `HttpPostRequestDecoder`…
CVE-2021-41184USmedium6.1Exploit
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execut…
CVE-2020-11022USmedium6.1Exploit
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan