Oracle Financial Services Regulatory Reporting With Agilereporter vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Oracle Financial Services Regulatory Reporting With Agilereporter: 3 record(s), with affected versions and fixes.
cpe:2.3:a:oracle:financial_services_regulatory_reporting_with_agilereporter

CVE-2020-7712 High · 7.2 CWE-78 Aug 30, 2020

Command Injection

This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.

CVE-2020-5398 High · 7.5 CWE-494 Jan 16, 2020

RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application

In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.

CVE-2017-5645 Critical · 9.8 Public exploit CWE-502 Apr 17, 2017

Deserialization of Untrusted Data in Apache Software Foundation Log4j

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.