Skip to content
OpenAdvisories
Medium WID-SEC-2025-0136 1 CVE

Oracle Commerce: Schwachstelle gefährdet Vertraulichkeit

Published Jan 21, 2025 · Updated Jan 21, 2025 · de-DE

Vendor: Oracle Product: Commerce Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Oracle Commerce ausnutzen, um die Vertraulichkeit zu gefährden.

Product

Oracle Commerce ist eine elektronische Handelsplattform.

Vulnerabilities 1

  • Medium 5.3
    CVE-2023-33201

    Bouncy Castle For Java LDAP injection vulnerability

    Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability. The vulnerability only affects applications that use an LDAP CertStore from Bouncy Castle to validate X.509 certificates. During the certificate validation process, Bouncy Cast…

    druid tez bouncycastle bouncycastle Debian Ubuntu Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References