Vulnerabilidades do Oracle Service Bus

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Oracle Service Bus: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:oracle:service_bus

CVE-2019-10086 Alta · 7.3 CWE-502 20/08/2019

Deserialization of Untrusted Data em Apache Software Foundation Commons Beanutils

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.