Summary
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Supply Chain ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
Product
Die Oracle Supply Chain ist eine Sammlung von Applikationen für verschiedene Zwecke.
Vulnerabilities 6
-
Critical 9.9
Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Agile Integration Services).…
-
High 8.1
Apache Xerces C++: Use-after-free on external DTD scan
The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD pro…
-
High 8.1
Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Agile Integration Services).…
-
High 7.5
Apache Tomcat: HTTP/2 excess header handling DoS
Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 s…
-
High 7.5
Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Install). The supported vers…
-
Medium 6.5
Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: SDK-Software Development Kit…
Revision history
-
#1
Initiale Fassung
References
-
Oracle Critical Patch Update Advisory - January 2025 - Appendix Oracle Supply Chain vom 2025-01-21
https://www.oracle.com/security-alerts/cpujan2025.html#AppendixSCP