Oracle Commerce: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 8

• High 7.5
  CVE-2021-40690

  Bypass of the secureValidation property

  All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abus…

  Apache Software Foundation Apache Santuario org.apache.santuario:xmlsec libxml-security-java Debian Ubuntu Maven
  Sep 19, 2021
• High 7.5
  CVE-2022-45143

  Apache Tomcat: JsonErrorReportValve escaping

  The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to s…

  Apache Software Foundation Apache Tomcat tomcat9 tomcat9 Debian Ubuntu Maven
  Jan 3, 2023
• High 7.5
  CVE-2023-24998 Public exploit EPSS 49%

  Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts

  Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new c…

  Apache Software Foundation Apache Tomcat Apache Commons FileUpload tomcat9 Debian Ubuntu Maven
  Feb 20, 2023
• High 7.3
  CVE-2019-10086 EPSS 29%

  Insecure Deserialization in Apache Commons Beanutils

  In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default chara…

  Apache Apache Commons Beanutils trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  Aug 20, 2019
• Medium 6.5
  CVE-2021-41184 Public exploit EPSS 41%

  XSS in the `of` option of the `.position()` util

  jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value pass…

  jquery jquery-ui jQuery.UI.Combined org.webjars.npm:jquery-ui Debian Ubuntu npm Maven NuGet RubyGems
  Oct 26, 2021
• Medium 6.5
  CVE-2022-23437 EPSS 12%

  Infinite loop within Apache XercesJ xml parser

  There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged durat…

  Apache Software Foundation Apache Xerces xerces:xercesImpl libxerces2-java Debian Ubuntu Azure Linux Maven
  Jan 24, 2022
• Medium 5.3
  CVE-2022-41881

  HAProxyMessageDecoder Stack Exhaustion DoS

  Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.F…

  netty netty netty netty Debian Ubuntu Maven
  Dec 12, 2022
• Medium 4.7
  CVE-2023-28439

  ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process

  CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special condition…

  ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu
  Mar 22, 2023

Revision history

1. 2023-07-18 #1

   Initiale Fassung

References

• Oracle Critical Patch Update Advisory - July 2023 - Appendix Oracle Commerce vom 2023-07-18
  https://www.oracle.com/security-alerts/cpujul2023.html#AppendixOCOM