Oracle Enterprise Manager: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 7

• Critical 9.8
  CVE-2022-23305 Public exploit EPSS 67%

  SQL injection in JDBC Appender in Apache Log4j V1

  By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate…

  Apache Software Foundation Apache Log4j 1.x druid apache-log4j1.2 Debian Ubuntu Wolfi Maven
  Jan 18, 2022
• Critical 9.8
  CVE-2023-25690 Public exploit EPSS 84%

  Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

  Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when mod_proxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific patter…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Mar 7, 2023
• High 7.5
  CVE-2022-42003

  Uncontrolled Resource Consumption in Jackson-databind

  In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.

  management-api-for-apache-cassandra-5.0 com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Wolfi Maven
  Oct 2, 2022
• High 7.5
  CVE-2023-24998 Public exploit EPSS 49%

  Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts

  Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new c…

  Apache Software Foundation Apache Tomcat Apache Commons FileUpload tomcat9 Debian Ubuntu Maven
  Feb 20, 2023
• Medium 6.5
  CVE-2021-41184 Public exploit EPSS 41%

  XSS in the `of` option of the `.position()` util

  jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value pass…

  jquery jquery-ui jQuery.UI.Combined org.webjars.npm:jquery-ui Debian Ubuntu npm Maven NuGet RubyGems
  Oct 26, 2021
• Medium 6.5
  CVE-2022-22950 EPSS 37%

  Allocation of Resources Without Limits or Throttling in Spring Framework

  n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.

  libspring-java libspring-java org.springframework:spring-expression Debian Ubuntu Maven
  Apr 1, 2022
• Medium 6.5
  CVE-2022-22971 Public exploit

  Allocation of Resources Without Limits or Throttling in Spring Framework

  In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.

  libspring-java libspring-java jenkins org.springframework:spring-messaging Debian Ubuntu Alpine Maven
  May 12, 2022

Revision history

1. 2023-07-18 #1

   Initiale Fassung

References

• Oracle Critical Patch Update Advisory - July 2023 - Appendix Oracle Enterprise Manager vom 2023-07-18
  https://www.oracle.com/security-alerts/cpujul2023.html#AppendixEM