Oracle

Product Lifecycle Analytics

14 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.5

CVE-2021-44832

Warnung
  • EPSS 97.91%
  • Veröffentlicht 28.12.2021 20:15:08
  • Zuletzt bearbeitet 29.05.2026 20:16:21

Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has ...

5.1

CVE-2021-2351

Exploit
  • EPSS 2.5%
  • Veröffentlicht 21.07.2021 15:15:21
  • Zuletzt bearbeitet 21.11.2024 06:02:56

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracl...

5.5

CVE-2021-36374

  • EPSS 2.64%
  • Veröffentlicht 14.07.2021 07:15:08
  • Zuletzt bearbeitet 21.11.2024 06:13:38

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. ...

8.2

CVE-2020-11987

  • EPSS 13.64%
  • Veröffentlicht 24.02.2021 18:15:11
  • Zuletzt bearbeitet 03.11.2025 20:15:42

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arb...