Skip to content
OpenAdvisories
High 1 exploited CVE NCSC-2024-0298 32 CVEs

Kwetsbaarheden verholpen in Oracle Fusion Middleware

Published Jul 17, 2024 · Updated Jul 17, 2024 · nl

Vendor: Oracle Product: Fusion Middleware Product: Fusion Middleware MapViewer

Summary

Er zijn kwetsbaarheden verholpen in Oracle Fusion Middleware.

Details

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:

* Denial-of-Service (DoS)
* Toegang tot gevoelige gegevens
* Toegang tot systeemgegevens
* Manipulatie van gegevens
* (Remote) code execution (Gebruikersrechten)

Oplossingen
Oracle heeft updates beschikbaar gesteld om de kwetsbaarheden te verhelpen. Zie de referenties voor meer informatie.

Vulnerabilities 32

  • High 7.5
    CVE-2024-21182 Exploited Public exploit EPSS 74%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
    KEV Jun 1, 2026
  • Critical 9.8
    CVE-2022-45378

    Apache SOAP allows unauthenticated users to potentially invoke arbitrary code

    In the default configuration of Apache SOAP, an RPCRouterServlet is available without authentication. This gives an attacker the possibility to invoke methods on the classpath that meet certain criteria. Depending on what classes are available on the classpat…

    Apache Software Foundation Apache SOAP soap:soap Maven
  • Critical 9.8
    CVE-2024-21181

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Critical 9.1
    CVE-2023-34034 Public exploit

    Access Control Bypass in Spring Security

    Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.

    org.springframework.security:spring-security-config Maven
  • High 8.8
    CVE-2023-45853

    pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency

    MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is a…

    qt6-qtwebengine qt5-qtwebengine rust cloud-hypervisor Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  • High 8.8
    CVE-2023-4759

    Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write

    Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cl…

    Eclipse Foundation Eclipse JGit org.eclipse.jgit:org.eclipse.jgit jgit Debian Ubuntu Maven
  • High 8.1
    CVE-2024-22243 Public exploit

    CVE-2024-22243: Spring Framework URL Parsing with Host Validation

    Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html  a…

    Spring Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • High 8.1
    CVE-2024-22259

    CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)

    Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/def…

    Spring Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • High 8.1
    CVE-2024-22262 Public exploit

    CVE-2024-22262: Spring Framework URL Parsing with Host Validation

    Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html  a…

    Spring Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • High 7.5
    CVE-2023-24998 Public exploit EPSS 49%

    Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts

    Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new c…

    Apache Software Foundation Apache Tomcat Apache Commons FileUpload tomcat9 Debian Ubuntu Maven
  • High 7.5
    CVE-2023-36478

    HTTP/2 HPACK integer overflow and buffer allocation

    Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to exceed their size limi…

    Eclipse Foundation jetty.project jetty9 jetty Debian Ubuntu Alpine Maven
  • High 7.5
    CVE-2023-5072

    DoS Vulnerability in JSON-Java

    Denial of Service in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

    https://github.com/stleary/JSON-java openjdk17 openjdk21 libjettison-java Debian Ubuntu Alpine Maven
  • High 7.5
    CVE-2023-52425

    libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in t…

    insighttoolkit4 expat vtk swish-e Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2024-21175

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • High 7.5
    CVE-2024-21183

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • High 7.5
    CVE-2024-22201

    Jetty connection leaking on idle timeout when TCP congested

    Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptor…

    jetty jetty.project jetty9 jetty Debian Ubuntu Maven
  • High 7.5
    CVE-2024-25062

    An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD…

    qt6-qtwebengine libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2024-29857

    Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

    An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CP…

    druid tez bouncycastle bouncycastle Debian Ubuntu Wolfi Maven NuGet
  • Medium 6.5
    CVE-2021-29425 Public exploit EPSS 11%

    Possible limited path traversal vulnerabily in Apache Commons IO

    In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not furth…

    Apache Software Foundation Apache Commons IO druid commons-io:commons-io Debian Ubuntu Wolfi Maven
  • Medium 6.5
    CVE-2021-37533

    Apache Commons Net's FTP client trusts the host from PASV response by default

    Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may l…

    Apache Software Foundation Apache Commons Net druid libcommons-net-java Debian Ubuntu Wolfi Maven
  • Medium 6.5
    CVE-2022-40152 EPSS 18%

    Stack Buffer Overflow in Woodstox

    Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effec…

    x-stream Woodstox libxstream-java sonarqube-10 Debian Ubuntu Wolfi Maven
  • Medium 6.5
    CVE-2023-6129

    POLY1305 MAC implementation corrupts vector registers on PowerPC

    Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions. Impact summary: If an attacker ca…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 6.3
    CVE-2020-1945

    Sensitive Data Exposure in Apache Ant

    Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the te…

    ant ant apache-ant org.apache.ant:ant Debian Ubuntu Alpine Maven
  • Medium 6.1
    CVE-2024-21133

    Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Servlet). Supported versi…

    Oracle Reports Developer
  • Medium 5.9
    CVE-2023-48795 Public exploit Scanner template EPSS 94%

    Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…

    zot kubescape kots k3d Debian Ubuntu Azure Linux Alpine Wolfi PyPI Go crates.io
  • Medium 5.5
    CVE-2023-29081

    InstallShield Symlink Vulnerability Affecting Suite Project Setups

    A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users to cause a Denial of Service (DoS) condition when handling move operations on local, temporary folde…

    Revenera InstallShield
  • Medium 5.5
    CVE-2023-2976

    Use of temporary directory for file creation in `FileBackedOutputStream` in Guava

    Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary di…

    Google Guava celeborn-0.6 trino-plugin-clickhouse Debian Ubuntu Azure Linux Wolfi Maven
  • Medium 5.5
    CVE-2024-26308 Public exploit

    Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

    Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue.

    Apache Software Foundation Apache Commons Compress druid trino Debian Ubuntu Wolfi Maven
  • Medium 5.3
    CVE-2020-13956

    Cross-site scripting in Apache HttpClient

    Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

    druid trino trino-plugin-opensearch trino-plugin-pinot Debian Ubuntu Wolfi Maven
  • Medium 5.3
    CVE-2024-0853

    OCSP verification bypass with TLS session reuse

    curl inadvertently kept the SSL session ID for connections in its cache even when the verify status (*OCSP stapling*) test failed. A subsequent transfer to the same hostname could then succeed if the session ID cache was still fresh, which then skipped the ve…

    curl curl curl curl Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2024-29025

    Netty HttpPostRequestDecoder can OOM

    Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `HttpPostRequestDecoder` can be tricked to accumulate data. While the decoder can store items on the dis…

    netty netty druid netty Debian Ubuntu Wolfi Maven
  • Medium 4.7
    CVE-2023-46750

    Apache Shiro: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Shiro.

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro. Mitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+.

    Apache Software Foundation Apache Shiro shiro shiro Debian Ubuntu Maven

Revision history

  1. #0

    Initiele versie

References