Oracle Spatial Studio vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Oracle Spatial Studio: 2 record(s), with affected versions and fixes.
cpe:2.3:a:oracle:spatial_studio

CVE-2020-13956 Medium · 5.3 CWE-20 Dec 2, 2020

Improper Input Validation in Apache Software Foundation Httpclient

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

CVE-2019-10219 Medium · 6.1 CWE-79 Nov 8, 2019

Cross-site Scripting (XSS) in Red Hat Hibernate Validator

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.