Skip to content
OpenAdvisories
Medium WID-SEC-2026-1197 2 CVEs

Oracle REST Data Services: Mehrere Schwachstellen

Published Apr 21, 2026 · Updated Apr 21, 2026 · de-DE

Vendor: Oracle Product: REST Data Services Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle REST Data Services ausnutzen, um die Verfügbarkeit zu gefährden.

Product

Oracle REST Data Services (ORDS) ermöglicht die Erstellung grundlegender RESTful Web Services unter Verwendung von PL/SQL.

Vulnerabilities 2

  • High 7.7
    CVE-2025-5115

    MadeYouReset HTTP/2 vulnerability

    In Eclipse Jetty, versions <=9.4.57, <=10.0.25, <=11.0.25, <=12.0.21, <=12.1.0.alpha2, an HTTP/2 client may trigger the server to send RST_STREAM frames, for example by sending frames that are malformed or that should not be sent in a particular stream state,…

    Eclipse Jetty Eclipse Jetty trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  • Medium 5.5
    CVE-2025-66453

    Rhino vulnerable high CPU usage and potential DoS when passing specific numbers to toFixed() function

    Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed() function, it might lead to high CPU consumption and …

    Mozilla rhino rhino org.mozilla:rhino Debian Ubuntu Azure Linux Maven

Revision history

  1. #1

    Initiale Fassung

References