Vulnerabilidades do Oracle Banking Cash Management
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oracle Banking Cash Management: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:oracle:banking_cash_management
CVE-2022-22963
Crítica · 9.8
KEV Urgente · 83 Exploit público CWE-917 01/04/2022
VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
CVE-2021-29505
Alta · 8.8
Exploit público CWE-502 28/05/2021
XStream is vulnerable to a Remote Command Execution attack
XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17.
CVE-2020-26217
Alta · 8.8
Exploit público CWE-78 16/11/2020
Remote Code Execution in XStream
XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist is not affected. The linked advisory provides code workarounds for users who cannot upgrade. The issue is fixed in version 1.4.14.