Medium WID-SEC-2025-0811 2 CVEs

Oracle Policy Automation: Mehrere Schwachstellen

Published Apr 15, 2025 · Updated Apr 15, 2025 · de-DE

Vendor: Oracle Product: Policy Automation Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Policy Automation ausnutzen, um die Verfügbarkeit zu gefährden.

Product

Oracle Policy Automation dient der automatisierten Verwaltung und Durchsetzung von Richtlinien.

Vulnerabilities 2

High 7.5

CVE-2024-57699

Netplex Json-smart Uncontrolled Recursion vulnerability

A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issu…

trino trino-plugin-opensearch trino-plugin-pinot trino-plugin-lakehouse Debian Ubuntu Wolfi Maven

Feb 5, 2025
Medium 4.3

CVE-2024-47554

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before …

Apache Software Foundation Apache Commons IO druid kserve-storage-controller Debian Ubuntu Azure Linux Wolfi Maven

Oct 3, 2024

Revision history

2025-04-15 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - April 2025 - Appendix Oracle Policy Automation vom 2025-04-15
https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixPOLI