Kwetsbaarheden verholpen in Oracle Analytics

Summary

Details

Vulnerabilities 8

• Critical 9.8
  CVE-2022-45047 Public exploit

  Apache MINA SSHD: Java unsafe deserialization vulnerability

  Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSH…

  Apache Software Foundation Apache MINA SSHD org.apache.sshd:sshd-common org.apache.sshd:sshd-core Maven
  Nov 16, 2022
• Critical 9.8
  CVE-2025-9230

  Out-of-bounds read & write in RFC 3211 KEK Unwrap

  Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  Sep 30, 2025
• Critical 9.1
  CVE-2021-23926

  XMLBeans XML Entity Expansion

  The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0.

  Apache Software Foundation Apache XMLBeans org.apache.xmlbeans:xmlbeans xmlbeans Debian Ubuntu Maven
  Jan 14, 2021
• High 8.7
  CVE-2025-52999 Public exploit

  jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data

  jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a Stackov…

  FasterXML jackson-core druid tez Debian Ubuntu Wolfi Maven
  Jun 25, 2025
• High 7.5
  CVE-2024-57699

  Netplex Json-smart Uncontrolled Recursion vulnerability

  A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issu…

  trino trino-plugin-opensearch trino-plugin-lakehouse trino-plugin-pinot Debian Ubuntu Wolfi Maven
  Feb 5, 2025
• High 7.1
  CVE-2026-21976

  Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Oracle Ana…

  Oracle Oracle Business Intelligence Enterprise Edition
  Jan 20, 2026
• Medium 5.3
  CVE-2025-31672

  Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names

  Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names (inc…

  Apache Software Foundation Apache POI opensearch-2 libapache-poi-java Debian Ubuntu Wolfi Maven
  Apr 9, 2025
• Medium 5.3
  CVE-2025-48924 Public exploit

  Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs

  Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass(...) can thr…

  Apache Software Foundation Apache Commons Lang druid thingsboard-tb-node Debian Ubuntu Azure Linux Wolfi Maven
  Jul 11, 2025

Revision history

1. 2026-01-21 #1.0.0

   Initiele versie

References

• Reference
  https://www.oracle.com/security-alerts/cpujan2026.html