Medium WID-SEC-2025-1570 3 CVEs

Oracle Insurance Applications: Mehrere Schwachstellen

Published Jul 15, 2025 · Updated Jul 15, 2025 · de-DE

Vendor: Oracle Product: Insurance Applications Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Insurance Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Insurance Applications ist eine Produktfamilie mit Lösungen für die Versicherungsbranche.

Vulnerabilities 3

High 7.5

CVE-2024-57699

Netplex Json-smart Uncontrolled Recursion vulnerability

A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issu…

trino trino-plugin-opensearch trino-plugin-lakehouse trino-plugin-pinot Debian Ubuntu Wolfi Maven

Feb 5, 2025
Medium 4.5

CVE-2025-26791

DOMPurify allows Cross-site Scripting (XSS)

DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).

cure53 DOMPurify grafana-image-renderer dompurify Debian Ubuntu Wolfi npm

Feb 14, 2025
Medium 4.3

CVE-2024-47554

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before …

Apache Software Foundation Apache Commons IO druid kserve-storage-controller Debian Ubuntu Azure Linux Wolfi Maven

Oct 3, 2024

Revision history

2025-07-15 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - July 2025 - Appendix Oracle Insurance Applications vom 2025-07-15
https://www.oracle.com/security-alerts/cpujul2025.html#AppendixINSU