Skip to content
OpenAdvisories
High 1 exploited CVE WID-SEC-2023-1048 12 CVEs

Oracle Construction and Engineering: Mehrere Schwachstellen

Published Oct 20, 2020 · Updated Feb 4, 2024 · Revision 3 · de-DE

Vendor: EMC Vendor: IBM Vendor: Oracle Product: Avamar Product: Construction and Engineering Product: Tivoli Network Manager 4.2.0 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Construction and Engineering ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.

Product

Construction and Engineering ist eine Sammlung von Werkzeugen zur Unterstützung von Bau- und Ingenieurbüros. Sie umfasst u. a. Projektmanagement-Lösungen zur Verwaltung von Projekte, zur Schaffung von Transparenz, zur Zusammenarbeit und zur Verwaltung von Änderungen.

Vulnerabilities 12

  • High 7.5
    CVE-2019-17558 Exploited Public exploit Scanner template EPSS 99%

    Improper Input Validation in Apache Solr

    Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configse…

    org.apache.solr:solr-core lucene-solr Debian Maven
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-17495 Public exploit

    Cross-site scripting in Swagger-UI

    A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other w…

    swagger-ui org.webjars:swagger-ui io.springfox:springfox-swagger-ui org.webjars.npm:swagger-ui npm Maven
  • Critical 9.1
    CVE-2015-1832 EPSS 12%

    Improper Restriction of XML External Entity Reference in Apace Derby

    XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via v…

    org.apache.derby:derby derby derby Debian Ubuntu Maven
  • High 8.8
    CVE-2017-9096 Public exploit

    Improper Restriction of XML External Entity Reference in iText

    The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity (XXE) attacks via a crafted PDF.

    com.itextpdf:itextpdf com.lowagie:itext Maven
  • High 8.8
    CVE-2018-17196

    Improper Input Validation in Apache Kafka

    In Apache Kafka versions between 0.11.0.0 and 2.1.0, it is possible to manually craft a Produce request which bypasses transaction/idempotent ACL validation. Only authenticated clients with Write permission on the respective topics are able to exploit this vu…

    Apache Kafka org.apache.kafka:kafka Maven
  • High 7.5
    CVE-2020-13934 EPSS 64%

    Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat

    An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests were made, an OutOfMemoryException could occur…

    org.apache.tomcat:tomcat tomcat8 tomcat9 tomcat9 Debian Ubuntu Maven
  • High 7.5
    CVE-2020-13935 Public exploit EPSS 87%

    Infinite Loop in Apache Tomcat

    The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payl…

    org.apache.tomcat:tomcat tomcat8 tomcat9 tomcat9 Debian Ubuntu Maven
  • Medium 5.5
    CVE-2020-9489

    Missing Release of Memory after Effective Lifetime in Apache Tika

    A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImagePar…

    The Apache Software Foundation Apache Tika tika tika Debian Ubuntu Maven
  • Low 3.7
    CVE-2020-9488 Public exploit

    Improper validation of certificate with host mismatch in Apache Log4j SMTP appender

    Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.…

    Apache Apache Log4j apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
  • Unscored —
    CVE-2020-11984 Public exploit Scanner template EPSS 90%

    Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

    apache2 apache2 apache2 uwsgi Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-11993 EPSS 57%

    Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic …

    apache2 apache2 apache2 Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-9490 EPSS 89%

    Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 reque…

    apache2 apache2 apache2 Debian Ubuntu Alpine

Revision history

  1. #3

    Neue Updates von Dell aufgenommen

  2. #2

    Neue Updates von IBM aufgenommen

  3. #1

    Initiale Fassung

References