Vulnerabilidades do Oracle Financial Services Regulatory Reporting With Agilereporter
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oracle Financial Services Regulatory Reporting With Agilereporter: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:oracle:financial_services_regulatory_reporting_with_agilereporter
CVE-2020-7712
Alta · 7.2
CWE-78 30/08/2020
Command Injection
This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.
CVE-2020-5398
Alta · 7.5
CWE-494 16/01/2020
RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
CVE-2017-5645
Crítica · 9.8
Exploit público CWE-502 17/04/2017
Deserialization of Untrusted Data em Apache Software Foundation Log4j
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.