Skip to content
OpenAdvisories
High WID-SEC-2023-2684 3 CVEs

Oracle Utilities Applications: Mehrere Schwachstellen

Published Oct 17, 2023 · Updated Oct 17, 2023 · de-DE

Vendor: Oracle Product: Utilities Applications Product: Utilities Applications <= 4.5.0.1.2 Product: Utilities Applications 4.2.0.3.0 Product: Utilities Applications 4.3.0.5.0 Product: Utilities Applications 4.3.0.6.0 Product: Utilities Applications 4.4.0.0.0 Product: Utilities Applications 4.4.0.2.0 Product: Utilities Applications 4.4.0.3.0 Product: Utilities Applications 4.5.0.0.0 Product: Utilities Applications 4.5.0.0.1 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Utilities Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Utilities Applications ist eine Produktfamilie mit branchenspezifischen Lösungen für Ver- und Entsorger.

Vulnerabilities 3

  • Critical 9.8
    CVE-2022-42920

    Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing

    Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pa…

    Apache Software Foundation Apache Commons BCEL bcel bcel Debian Ubuntu Azure Linux Maven
  • High 7.5
    CVE-2022-31129

    Inefficient Regular Expression Complexity in moment

    moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 par…

    moment moment mediawiki wordpress Debian Ubuntu npm NuGet
  • Medium 6.3
    CVE-2023-21829

    Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server. Supported versions that are af…

    Oracle Database - Enterprise Edition

Revision history

  1. #1

    Initiale Fassung

References