Oracle Configuration Manager vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Oracle Configuration Manager: 4 record(s), with affected versions and fixes.cpe:2.3:a:oracle:configuration_manager
CVE-2020-12723
High · 7.5
CWE-120 Jun 5, 2020
Classic Buffer Overflow in Perl
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
CVE-2020-10878
High · 8.6
CWE-190 Jun 5, 2020
Integer Overflow or Wraparound in Perl
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.
CVE-2020-10543
High · 8.2
CWE-190 Jun 5, 2020
Integer Overflow or Wraparound in Perl
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
CVE-2017-5645
Critical · 9.8
Public exploit CWE-502 Apr 17, 2017
Deserialization of Untrusted Data in Apache Software Foundation Log4j
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.