Oracle Siebel CRM: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2024-24549 Public exploit EPSS 23%

  Apache Tomcat: HTTP/2 header handling DoS

  Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after …

  Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
  Mar 13, 2024
• Medium 4.7
  CVE-2023-28439

  ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process

  CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special condition…

  ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu
  Mar 22, 2023

Revision history

1. 2024-10-15 #1

   Initiale Fassung

References

• Oracle Critical Patch Update Advisory - October 2024 - Appendix Oracle Siebel CRM vom 2024-10-15
  https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixSECR