NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Oracle Supply Chain
view advisory published 2024-07-17
Er zijn kwetsbaarheden verholpen in Oracle Supply Chain.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-46589US | high7.5 | — | ||
Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 throu… | ||||
| CVE-2023-37536US | high8.8 | — | ||
An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request. | ||||
| CVE-2023-44487US | high7.5OT critical | KEV | ||
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through… | ||||
| CVE-2023-24998US | high7.5 | Exploit | ||
Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload… | ||||
| CVE-2022-34169US | high7.5 | Exploit | ||
The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated b… | ||||
02
references
External citations — patches, advisories, analysis.
- Source - nvdexternal
- Source - nvdexternal
- Source - nvdexternal
- Source - nvdexternal
- Source - nvdexternal
- Reference - oracleexternal
- Reference - cveprojectv5; ibm; nvd; oracleexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan