Skip to content
OpenAdvisories
High WID-SEC-2025-1660 21 CVEs

Oracle Utilities: Mehrere Schwachstellen

Published Apr 16, 2019 · Updated Jul 28, 2025 · Revision 2 · de-DE

Vendor: Oracle Product: Linux Product: Utilities Applications Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Utilities ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Oracle Utilities ist eine Produktfamilie mit branchenspezifischen Lösungen für Ver- und Entsorger.

Vulnerabilities 21

  • Critical 9.8
    CVE-2016-1000031 EPSS 33%

    Improper Access Control in commons-fileupload

    Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution

    tomcat8 tomcat7 tomcat6 commons-fileupload:commons-fileupload Debian Ubuntu Maven
  • Critical 9.8
    CVE-2018-8088 EPSS 15%

    Improper Access Control in SLF4J

    org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 late…

    org.slf4j:slf4j-ext libslf4j-java Debian Maven
  • High 8.8
    CVE-2018-1258

    Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass

    Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.

    Pivotal Spring Framework org.springframework:spring-core Maven
  • Medium 6.5
    CVE-2018-1257

    Denial of Service in org.springframework:spring-core

    Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious…

    Pivotal Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • Medium 6.1
    CVE-2015-9251 Public exploit EPSS 30%

    Cross-Site Scripting (XSS) in jquery

    jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

    ruby ceph jquery-rails org.webjars.npm:jquery Ubuntu Azure Linux Alpine npm Maven NuGet RubyGems
  • Medium 5.9
    CVE-2018-11039

    Spring Framework Cross Site Tracing (XST)

    Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including TRACE) using the HiddenHttpMethodFilter in Spring MVC. If a…

    Pivotal Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • Medium 5.9
    CVE-2018-11040

    Moderate severity vulnerability that affects org.springframework:spring-core

    Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and Ma…

    Pivotal Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • Unscored —
    CVE-2014-7923

    The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in…

    chromium-browser oxide-qt icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-7926

    The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in…

    chromium-browser oxide-qt icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-7940

    The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 2931…

    chromium-browser oxide-qt icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-8146 Public exploit EPSS 25%

    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in …

    icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-8147 Public exploit EPSS 24%

    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in …

    icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-9654

    The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in G…

    icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-9911

    Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Component…

    android icu icu mozjs24 Debian Ubuntu
  • Unscored —
    CVE-2015-5922

    Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.…

  • Unscored —
    CVE-2016-6293

    The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 …

    icu icu icu Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-7415

    Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) throu…

    icu icu icu Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-14952

    Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote att…

    icu icu Debian Ubuntu
  • Unscored —
    CVE-2017-17484

    The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mish…

  • Unscored —
    CVE-2017-7867

    International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-base…

    icu icu icu Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-7868

    International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-base…

    icu icu icu Debian Ubuntu Alpine

Revision history

  1. #2

    Neue Updates von Oracle Linux aufgenommen

  2. #1

    Initiale Fassung

References