Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2018-11784 (GCVE-0-2018-11784)
Vulnerability from cvelistv5 – Published: 2018-10-04 13:00 – Updated: 2024-09-16 17:04
VLAI
EPSS
Summary
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.
Severity
4.3 (Medium)
CWE
- Open Redirect
Assigner
References
39 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Apache Software Foundation | Apache Tomcat |
Affected:
9.0.0.M1 to 9.0.11
Affected: 8.5.0 to 8.5.33 Affected: 7.0.23 to 7.0.90 |
Date Public
2018-10-03 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T08:17:09.268Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
},
{
"name": "[announce] 20181003 [SECURITY] CVE-2018-11784 Apache Tomcat - Open Redirect",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75%40%3Cannounce.tomcat.apache.org%3E"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20181014-0002/"
},
{
"name": "105524",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/105524"
},
{
"name": "RHSA-2019:0131",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:0131"
},
{
"name": "RHSA-2019:0485",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:0485"
},
{
"name": "RHSA-2019:0130",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:0130"
},
{
"name": "[debian-lts-announce] 20181014 [SECURITY] [DLA 1544-1] tomcat7 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00005.html"
},
{
"name": "USN-3787-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/3787-1/"
},
{
"name": "[debian-lts-announce] 20181015 [SECURITY] [DLA 1545-1] tomcat8 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00006.html"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "FEDORA-2018-b18f9dd65b",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZ4PX4B3QTKRM35VJAVIEOPZAF76RPBP/"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
},
{
"name": "openSUSE-SU-2019:1547",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html"
},
{
"name": "RHSA-2019:1529",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1529"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10284"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"name": "openSUSE-SU-2019:1814",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
},
{
"name": "DSA-4596",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2019/dsa-4596"
},
{
"name": "20191229 [SECURITY] [DSA 4596-1] tomcat8 security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "https://seclists.org/bugtraq/2019/Dec/43"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpujan2020.html"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [24/30] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [28/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Apache Tomcat",
"vendor": "Apache Software Foundation",
"versions": [
{
"status": "affected",
"version": "9.0.0.M1 to 9.0.11"
},
{
"status": "affected",
"version": "8.5.0 to 8.5.33"
},
{
"status": "affected",
"version": "7.0.23 to 7.0.90"
}
]
}
],
"datePublic": "2018-10-03T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to \u0027/foo/\u0027 when the user requested \u0027/foo\u0027) a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Open Redirect",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-07-13T16:06:19.000Z",
"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
"shortName": "apache"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
},
{
"name": "[announce] 20181003 [SECURITY] CVE-2018-11784 Apache Tomcat - Open Redirect",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75%40%3Cannounce.tomcat.apache.org%3E"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security.netapp.com/advisory/ntap-20181014-0002/"
},
{
"name": "105524",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/105524"
},
{
"name": "RHSA-2019:0131",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:0131"
},
{
"name": "RHSA-2019:0485",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:0485"
},
{
"name": "RHSA-2019:0130",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:0130"
},
{
"name": "[debian-lts-announce] 20181014 [SECURITY] [DLA 1544-1] tomcat7 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00005.html"
},
{
"name": "USN-3787-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/3787-1/"
},
{
"name": "[debian-lts-announce] 20181015 [SECURITY] [DLA 1545-1] tomcat8 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00006.html"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "FEDORA-2018-b18f9dd65b",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZ4PX4B3QTKRM35VJAVIEOPZAF76RPBP/"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
},
{
"name": "openSUSE-SU-2019:1547",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html"
},
{
"name": "RHSA-2019:1529",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1529"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10284"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"name": "openSUSE-SU-2019:1814",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
},
{
"name": "DSA-4596",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2019/dsa-4596"
},
{
"name": "20191229 [SECURITY] [DSA 4596-1] tomcat8 security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "https://seclists.org/bugtraq/2019/Dec/43"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpujan2020.html"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [24/30] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [28/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@apache.org",
"DATE_PUBLIC": "2018-10-03T00:00:00",
"ID": "CVE-2018-11784",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Apache Tomcat",
"version": {
"version_data": [
{
"version_value": "9.0.0.M1 to 9.0.11"
},
{
"version_value": "8.5.0 to 8.5.33"
},
{
"version_value": "7.0.23 to 7.0.90"
}
]
}
}
]
},
"vendor_name": "Apache Software Foundation"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to \u0027/foo/\u0027 when the user requested \u0027/foo\u0027) a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Open Redirect"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"refsource": "CONFIRM",
"url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
},
{
"name": "[announce] 20181003 [SECURITY] CVE-2018-11784 Apache Tomcat - Open Redirect",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75@%3Cannounce.tomcat.apache.org%3E"
},
{
"name": "https://security.netapp.com/advisory/ntap-20181014-0002/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20181014-0002/"
},
{
"name": "105524",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/105524"
},
{
"name": "RHSA-2019:0131",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:0131"
},
{
"name": "RHSA-2019:0485",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:0485"
},
{
"name": "RHSA-2019:0130",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:0130"
},
{
"name": "[debian-lts-announce] 20181014 [SECURITY] [DLA 1544-1] tomcat7 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00005.html"
},
{
"name": "USN-3787-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3787-1/"
},
{
"name": "[debian-lts-announce] 20181015 [SECURITY] [DLA 1545-1] tomcat8 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00006.html"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "FEDORA-2018-b18f9dd65b",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZ4PX4B3QTKRM35VJAVIEOPZAF76RPBP/"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"refsource": "MISC",
"url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
},
{
"name": "openSUSE-SU-2019:1547",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html"
},
{
"name": "RHSA-2019:1529",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1529"
},
{
"name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10284",
"refsource": "CONFIRM",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10284"
},
{
"name": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"refsource": "MISC",
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"name": "openSUSE-SU-2019:1814",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html"
},
{
"name": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
"refsource": "MISC",
"url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
},
{
"name": "DSA-4596",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2019/dsa-4596"
},
{
"name": "20191229 [SECURITY] [DSA 4596-1] tomcat8 security update",
"refsource": "BUGTRAQ",
"url": "https://seclists.org/bugtraq/2019/Dec/43"
},
{
"name": "https://www.oracle.com/security-alerts/cpujan2020.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujan2020.html"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [24/30] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [28/34] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
},
{
"name": "http://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
"assignerShortName": "apache",
"cveId": "CVE-2018-11784",
"datePublished": "2018-10-04T13:00:00.000Z",
"dateReserved": "2018-06-05T00:00:00.000Z",
"dateUpdated": "2024-09-16T17:04:04.205Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2018-11784",
"date": "2026-06-05",
"epss": "0.82624",
"percentile": "0.99256"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"7.0.23\", \"versionEndIncluding\": \"7.0.90\", \"matchCriteriaId\": \"685846FE-E90A-45AA-9AD1-C15AEFE6928C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"8.5.0\", \"versionEndIncluding\": \"8.5.33\", \"matchCriteriaId\": \"E7530550-BDF3-4F91-B20C-0B79B40F0E6B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"9.0.1\", \"versionEndIncluding\": \"9.0.11\", \"matchCriteriaId\": \"B0B520E7-9CB1-4FE7-88F7-66419AC81B90\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7C6119C4-1200-4EBE-89AB-6AB755C6DE3A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*\", \"matchCriteriaId\": \"9D0689FE-4BC0-4F53-8C79-34B21F9B86C2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*\", \"matchCriteriaId\": \"89B129B2-FB6F-4EF9-BF12-E589A87996CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*\", \"matchCriteriaId\": \"8B6787B6-54A8-475E-BA1C-AB99334B2535\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*\", \"matchCriteriaId\": \"EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*\", \"matchCriteriaId\": \"E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*\", \"matchCriteriaId\": \"8A6DA0BE-908C-4DA8-A191-A0113235E99A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*\", \"matchCriteriaId\": \"39029C72-28B4-46A4-BFF5-EC822CFB2A4C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*\", \"matchCriteriaId\": \"1A2E05A3-014F-4C4D-81E5-88E725FBD6AD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*\", \"matchCriteriaId\": \"166C533C-0833-41D5-99B6-17A4FAB3CAF0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*\", \"matchCriteriaId\": \"D3768C60-21FA-4B92-B98C-C3A2602D1BC4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*\", \"matchCriteriaId\": \"DDD510FA-A2E4-4BAF-A0DE-F4E5777E9325\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*\", \"matchCriteriaId\": \"9F542E12-6BA8-4504-A494-DA83E7E19BD5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*\", \"matchCriteriaId\": \"C2409CC7-6A85-4A66-A457-0D62B9895DC1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*\", \"matchCriteriaId\": \"B392A7E5-4455-4B1C-8FAC-AE6DDC70689E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*\", \"matchCriteriaId\": \"EF411DDA-2601-449A-9046-D250419A0E1A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*\", \"matchCriteriaId\": \"D7D8F2F4-AFE2-47EA-A3FD-79B54324DE02\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*\", \"matchCriteriaId\": \"1B4FBF97-DE16-4E5E-BE19-471E01818D40\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*\", \"matchCriteriaId\": \"3B266B1E-24B5-47EE-A421-E0E3CC0C7471\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*\", \"matchCriteriaId\": \"29614C3A-6FB3-41C7-B56E-9CC3F45B04F0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*\", \"matchCriteriaId\": \"C6AB156C-8FF6-4727-AF75-590D0DCB3F9D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*\", \"matchCriteriaId\": \"C0C5F004-F7D8-45DB-B173-351C50B0EC16\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*\", \"matchCriteriaId\": \"D1902D2E-1896-4D3D-9E1C-3A675255072C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*\", \"matchCriteriaId\": \"49AAF4DF-F61D-47A8-8788-A21E317A145D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*\", \"matchCriteriaId\": \"454211D0-60A2-4661-AECA-4C0121413FEB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*\", \"matchCriteriaId\": \"0686F977-889F-4960-8E0B-7784B73A7F2D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*\", \"matchCriteriaId\": \"558703AE-DB5E-4DFF-B497-C36694DD7B24\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*\", \"matchCriteriaId\": \"ED6273F2-1165-47A4-8DD7-9E9B2472941B\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"B5A6F2F3-4894-4392-8296-3B8DD2679084\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9F4754FB-E3EB-454A-AB1A-AE3835C5350C\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"33C068A4-3780-4EAB-A937-6082DF847564\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"51EF4996-72F4-4FA4-814F-F5991E7A8318\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server:7.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5E92F9B3-3841-4C05-88F0-CEB0735EA4BB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B353CE99-D57C-465B-AAB0-73EF581127D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BF77CDCF-B9C9-427D-B2BF-36650FB2148C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:communications_application_session_controller:3.7.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CC967A48-D834-4E9B-8CEC-057E7D5B8174\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:communications_application_session_controller:3.8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F920CDE4-DF29-4611-93E9-A386C89EDB62\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1A3DC116-2844-47A1-BEC2-D0675DD97148\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E0F1DF3E-0F2D-4EFC-9A3E-F72149C8AE94\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"82EA4BA7-C38B-4AF3-8914-9E3D089EBDD4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B9C9BC66-FA5F-4774-9BDA-7AB88E2839C4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7F69B9A5-F21B-4904-9F27-95C0F7A628E3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:retail_order_broker:5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EAA4DF85-9225-4422-BF10-D7DAE7DCE007\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:retail_order_broker:5.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"77C2A2A4-285B-40A1-B9AD-42219D742DD4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EE8CF045-09BB-4069-BCEC-496D5AE3B780\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:secure_global_desktop:5.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B5265C91-FF5C-4451-A7C2-D388A65ACFA2\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to \u0027/foo/\u0027 when the user requested \u0027/foo\u0027) a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.\"}, {\"lang\": \"es\", \"value\": \"Cuando el servlet por defecto en Apache Tomcat en versiones de la 9.0.0.M1 a la 9.0.11, de la 8.5.0 a la 8.5.33 y de la 7.0.23 a la 7.0.90 devolv\\u00eda una redirecci\\u00f3n a un directorio (por ejemplo, redirigiendo a \\\"/foo/\u0027\u0027 cuando el usuario solicit\\u00f3 \u0027\\\"/foo\\\") se pudo usar una URL especialmente manipulada para hacer que la redirecci\\u00f3n se generara a cualquier URI de la elecci\\u00f3n del atacante.\"}]",
"id": "CVE-2018-11784",
"lastModified": "2024-11-21T03:44:01.827",
"metrics": "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N\", \"baseScore\": 4.3, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 1.4}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:N/I:P/A:N\", \"baseScore\": 4.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
"published": "2018-10-04T13:29:00.330",
"references": "[{\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html\", \"source\": \"security@apache.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html\", \"source\": \"security@apache.org\"}, {\"url\": \"http://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.html\", \"source\": \"security@apache.org\"}, {\"url\": \"http://www.securityfocus.com/bid/105524\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:0130\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:0131\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:0485\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1529\", \"source\": \"security@apache.org\"}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10284\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75%40%3Cannounce.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2018/10/msg00005.html\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2018/10/msg00006.html\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZ4PX4B3QTKRM35VJAVIEOPZAF76RPBP/\", \"source\": \"security@apache.org\"}, {\"url\": \"https://seclists.org/bugtraq/2019/Dec/43\", \"source\": \"security@apache.org\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20181014-0002/\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3787-1/\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4596\", \"source\": \"security@apache.org\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2020.html\", \"source\": \"security@apache.org\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2020.html\", \"source\": \"security@apache.org\"}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html\", \"source\": \"security@apache.org\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\", \"source\": \"security@apache.org\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"source\": \"security@apache.org\"}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html\", \"source\": \"security@apache.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/105524\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:0130\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:0131\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:0485\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1529\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10284\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75%40%3Cannounce.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2018/10/msg00005.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2018/10/msg00006.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZ4PX4B3QTKRM35VJAVIEOPZAF76RPBP/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://seclists.org/bugtraq/2019/Dec/43\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20181014-0002/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3787-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4596\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2020.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2020.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "security@apache.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-601\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2018-11784\",\"sourceIdentifier\":\"security@apache.org\",\"published\":\"2018-10-04T13:29:00.330\",\"lastModified\":\"2024-11-21T03:44:01.827\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to \u0027/foo/\u0027 when the user requested \u0027/foo\u0027) a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.\"},{\"lang\":\"es\",\"value\":\"Cuando el servlet por defecto en Apache Tomcat en versiones de la 9.0.0.M1 a la 9.0.11, de la 8.5.0 a la 8.5.33 y de la 7.0.23 a la 7.0.90 devolv\u00eda una redirecci\u00f3n a un directorio (por ejemplo, redirigiendo a \\\"/foo/\u0027\u0027 cuando el usuario solicit\u00f3 \u0027\\\"/foo\\\") se pudo usar una URL especialmente manipulada para hacer que la redirecci\u00f3n se generara a cualquier URI de la elecci\u00f3n del atacante.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-601\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.23\",\"versionEndIncluding\":\"7.0.90\",\"matchCriteriaId\":\"685846FE-E90A-45AA-9AD1-C15AEFE6928C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.5.0\",\"versionEndIncluding\":\"8.5.33\",\"matchCriteriaId\":\"E7530550-BDF3-4F91-B20C-0B79B40F0E6B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"9.0.1\",\"versionEndIncluding\":\"9.0.11\",\"matchCriteriaId\":\"B0B520E7-9CB1-4FE7-88F7-66419AC81B90\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C6119C4-1200-4EBE-89AB-6AB755C6DE3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D0689FE-4BC0-4F53-8C79-34B21F9B86C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*\",\"matchCriteriaId\":\"89B129B2-FB6F-4EF9-BF12-E589A87996CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B6787B6-54A8-475E-BA1C-AB99334B2535\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*\",\"matchCriteriaId\":\"EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*\",\"matchCriteriaId\":\"E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A6DA0BE-908C-4DA8-A191-A0113235E99A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*\",\"matchCriteriaId\":\"39029C72-28B4-46A4-BFF5-EC822CFB2A4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A2E05A3-014F-4C4D-81E5-88E725FBD6AD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*\",\"matchCriteriaId\":\"166C533C-0833-41D5-99B6-17A4FAB3CAF0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3768C60-21FA-4B92-B98C-C3A2602D1BC4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*\",\"matchCriteriaId\":\"DDD510FA-A2E4-4BAF-A0DE-F4E5777E9325\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F542E12-6BA8-4504-A494-DA83E7E19BD5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2409CC7-6A85-4A66-A457-0D62B9895DC1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*\",\"matchCriteriaId\":\"B392A7E5-4455-4B1C-8FAC-AE6DDC70689E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF411DDA-2601-449A-9046-D250419A0E1A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*\",\"matchCriteriaId\":\"D7D8F2F4-AFE2-47EA-A3FD-79B54324DE02\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B4FBF97-DE16-4E5E-BE19-471E01818D40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B266B1E-24B5-47EE-A421-E0E3CC0C7471\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*\",\"matchCriteriaId\":\"29614C3A-6FB3-41C7-B56E-9CC3F45B04F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6AB156C-8FF6-4727-AF75-590D0DCB3F9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0C5F004-F7D8-45DB-B173-351C50B0EC16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1902D2E-1896-4D3D-9E1C-3A675255072C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*\",\"matchCriteriaId\":\"49AAF4DF-F61D-47A8-8788-A21E317A145D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*\",\"matchCriteriaId\":\"454211D0-60A2-4661-AECA-4C0121413FEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*\",\"matchCriteriaId\":\"0686F977-889F-4960-8E0B-7784B73A7F2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*\",\"matchCriteriaId\":\"558703AE-DB5E-4DFF-B497-C36694DD7B24\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED6273F2-1165-47A4-8DD7-9E9B2472941B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B5A6F2F3-4894-4392-8296-3B8DD2679084\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F4754FB-E3EB-454A-AB1A-AE3835C5350C\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E92F9B3-3841-4C05-88F0-CEB0735EA4BB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B353CE99-D57C-465B-AAB0-73EF581127D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF77CDCF-B9C9-427D-B2BF-36650FB2148C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_application_session_controller:3.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC967A48-D834-4E9B-8CEC-057E7D5B8174\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_application_session_controller:3.8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F920CDE4-DF29-4611-93E9-A386C89EDB62\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A3DC116-2844-47A1-BEC2-D0675DD97148\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0F1DF3E-0F2D-4EFC-9A3E-F72149C8AE94\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"82EA4BA7-C38B-4AF3-8914-9E3D089EBDD4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B9C9BC66-FA5F-4774-9BDA-7AB88E2839C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F69B9A5-F21B-4904-9F27-95C0F7A628E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:retail_order_broker:5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EAA4DF85-9225-4422-BF10-D7DAE7DCE007\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:retail_order_broker:5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"77C2A2A4-285B-40A1-B9AD-42219D742DD4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE8CF045-09BB-4069-BCEC-496D5AE3B780\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:secure_global_desktop:5.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5265C91-FF5C-4451-A7C2-D388A65ACFA2\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html\",\"source\":\"security@apache.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html\",\"source\":\"security@apache.org\"},{\"url\":\"http://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.html\",\"source\":\"security@apache.org\"},{\"url\":\"http://www.securityfocus.com/bid/105524\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:0130\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:0131\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:0485\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1529\",\"source\":\"security@apache.org\"},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10284\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75%40%3Cannounce.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/10/msg00005.html\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/10/msg00006.html\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZ4PX4B3QTKRM35VJAVIEOPZAF76RPBP/\",\"source\":\"security@apache.org\"},{\"url\":\"https://seclists.org/bugtraq/2019/Dec/43\",\"source\":\"security@apache.org\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20181014-0002/\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3787-1/\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4596\",\"source\":\"security@apache.org\"},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2020.html\",\"source\":\"security@apache.org\"},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2020.html\",\"source\":\"security@apache.org\"},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html\",\"source\":\"security@apache.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\",\"source\":\"security@apache.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\",\"source\":\"security@apache.org\"},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html\",\"source\":\"security@apache.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/105524\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:0130\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:0131\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:0485\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1529\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10284\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75%40%3Cannounce.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/10/msg00005.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/10/msg00006.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZ4PX4B3QTKRM35VJAVIEOPZAF76RPBP/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://seclists.org/bugtraq/2019/Dec/43\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20181014-0002/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3787-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4596\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
SUSE-SU-2018:3388-1
Vulnerability from csaf_suse - Published: 2018-10-24 11:48 - Updated: 2018-10-24 11:48Summary
Security update for tomcat
Severity
Moderate
Notes
Title of the patch: Security update for tomcat
Description of the patch: This update for tomcat to version 8.0.53 fixes the following security issues:
- CVE-2018-11784: When the default servlet in Apache Tomcat returned
a redirect to a directory (e.g. redirecting to '/foo/' when the user
requested '/foo') a specially crafted URL could be used to cause the
redirect to be generated to any URI of the attackers choice. (bsc#1110850)
- CVE-2018-1336: An improper handing of overflow in the UTF-8 decoder with
supplementary characters could have lead to an infinite loop in the decoder
causing a Denial of Service (bsc#1102400)
- CVE-2018-8034: The host name verification when using TLS with the WebSocket
client was missing. It is now enabled by default (bsc#1102379)
- CVE-2018-8037: If an async request was completed by the application at the
same time as the container triggered the async timeout, a race condition
existed that could have resulted in a user seeing a response intended for a
different user. An additional issue was present in the NIO and NIO2 connectors
that did not correctly track the closure of the connection when an async
request was completed by the application and timed out by the container at the
same time. This could also have resulted in a user seeing a response intended
for another user (bsc#1102410)
- CVE-2018-1305: Fixed late application of security constraints that can lead
to resource exposure for unauthorised users (bsc#1082481).
- CVE-2018-1304: Fixed incorrect handling of empty string URL in security
constraints that can lead to unitended exposure of resources (bsc#1082480).
- CVE-2017-15706: Fixed incorrect documentation of CGI Servlet search algorithm
that may lead to misconfiguration (bsc#1078677).
- CVE-2018-8014: The defaults settings for the CORS filter were insecure and
enable 'supportsCredentials' for all origins (bsc#1093697).
Patchnames: SUSE-SLE-SAP-12-SP1-2018-2433,SUSE-SLE-SERVER-12-SP1-2018-2433
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
6.1 (Medium)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
6.5 (Medium)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
9.1 (Critical)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch | — |
Vendor Fix
|
Threats
Impact
critical
References
39 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for tomcat",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for tomcat to version 8.0.53 fixes the following security issues:\n\n- CVE-2018-11784: When the default servlet in Apache Tomcat returned\n a redirect to a directory (e.g. redirecting to \u0027/foo/\u0027 when the user\n requested \u0027/foo\u0027) a specially crafted URL could be used to cause the\n redirect to be generated to any URI of the attackers choice. (bsc#1110850)\n- CVE-2018-1336: An improper handing of overflow in the UTF-8 decoder with\n supplementary characters could have lead to an infinite loop in the decoder\n causing a Denial of Service (bsc#1102400)\n- CVE-2018-8034: The host name verification when using TLS with the WebSocket\n client was missing. It is now enabled by default (bsc#1102379)\n- CVE-2018-8037: If an async request was completed by the application at the\n same time as the container triggered the async timeout, a race condition\n existed that could have resulted in a user seeing a response intended for a\n different user. An additional issue was present in the NIO and NIO2 connectors\n that did not correctly track the closure of the connection when an async\n request was completed by the application and timed out by the container at the\n same time. This could also have resulted in a user seeing a response intended\n for another user (bsc#1102410)\n- CVE-2018-1305: Fixed late application of security constraints that can lead\n to resource exposure for unauthorised users (bsc#1082481).\n- CVE-2018-1304: Fixed incorrect handling of empty string URL in security\n constraints that can lead to unitended exposure of resources (bsc#1082480).\n- CVE-2017-15706: Fixed incorrect documentation of CGI Servlet search algorithm\n that may lead to misconfiguration (bsc#1078677).\n- CVE-2018-8014: The defaults settings for the CORS filter were insecure and\n enable \u0027supportsCredentials\u0027 for all origins (bsc#1093697).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-SAP-12-SP1-2018-2433,SUSE-SLE-SERVER-12-SP1-2018-2433",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3388-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:3388-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183388-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:3388-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-October/004782.html"
},
{
"category": "self",
"summary": "SUSE Bug 1078677",
"url": "https://bugzilla.suse.com/1078677"
},
{
"category": "self",
"summary": "SUSE Bug 1082480",
"url": "https://bugzilla.suse.com/1082480"
},
{
"category": "self",
"summary": "SUSE Bug 1082481",
"url": "https://bugzilla.suse.com/1082481"
},
{
"category": "self",
"summary": "SUSE Bug 1093697",
"url": "https://bugzilla.suse.com/1093697"
},
{
"category": "self",
"summary": "SUSE Bug 1102379",
"url": "https://bugzilla.suse.com/1102379"
},
{
"category": "self",
"summary": "SUSE Bug 1102400",
"url": "https://bugzilla.suse.com/1102400"
},
{
"category": "self",
"summary": "SUSE Bug 1102410",
"url": "https://bugzilla.suse.com/1102410"
},
{
"category": "self",
"summary": "SUSE Bug 1110850",
"url": "https://bugzilla.suse.com/1110850"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15706 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15706/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-11784 page",
"url": "https://www.suse.com/security/cve/CVE-2018-11784/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1304 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1304/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1305 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1305/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1336 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1336/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-8014 page",
"url": "https://www.suse.com/security/cve/CVE-2018-8014/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-8034 page",
"url": "https://www.suse.com/security/cve/CVE-2018-8034/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-8037 page",
"url": "https://www.suse.com/security/cve/CVE-2018-8037/"
}
],
"title": "Security update for tomcat",
"tracking": {
"current_release_date": "2018-10-24T11:48:05Z",
"generator": {
"date": "2018-10-24T11:48:05Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:3388-1",
"initial_release_date": "2018-10-24T11:48:05Z",
"revision_history": [
{
"date": "2018-10-24T11:48:05Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "tomcat-8.0.53-10.35.1.noarch",
"product": {
"name": "tomcat-8.0.53-10.35.1.noarch",
"product_id": "tomcat-8.0.53-10.35.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"product": {
"name": "tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"product_id": "tomcat-admin-webapps-8.0.53-10.35.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"product": {
"name": "tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"product_id": "tomcat-docs-webapp-8.0.53-10.35.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"product": {
"name": "tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"product_id": "tomcat-el-3_0-api-8.0.53-10.35.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-javadoc-8.0.53-10.35.1.noarch",
"product": {
"name": "tomcat-javadoc-8.0.53-10.35.1.noarch",
"product_id": "tomcat-javadoc-8.0.53-10.35.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"product": {
"name": "tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"product_id": "tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-lib-8.0.53-10.35.1.noarch",
"product": {
"name": "tomcat-lib-8.0.53-10.35.1.noarch",
"product_id": "tomcat-lib-8.0.53-10.35.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"product": {
"name": "tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"product_id": "tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-webapps-8.0.53-10.35.1.noarch",
"product": {
"name": "tomcat-webapps-8.0.53-10.35.1.noarch",
"product_id": "tomcat-webapps-8.0.53-10.35.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-3_0-api-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-javadoc-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-lib-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-webapps-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-3_0-api-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-javadoc-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-lib-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-8.0.53-10.35.1.noarch as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch"
},
"product_reference": "tomcat-webapps-8.0.53-10.35.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-15706",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15706"
}
],
"notes": [
{
"category": "general",
"text": "As part of the fix for bug 61201, the documentation for Apache Tomcat 9.0.0.M22 to 9.0.1, 8.5.16 to 8.5.23, 8.0.45 to 8.0.47 and 7.0.79 to 7.0.82 included an updated description of the search algorithm used by the CGI Servlet to identify which script to execute. The update was not correct. As a result, some scripts may have failed to execute as expected and other scripts may have been executed unexpectedly. Note that the behaviour of the CGI servlet has remained unchanged in this regard. It is only the documentation of the behaviour that was wrong and has been corrected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15706",
"url": "https://www.suse.com/security/cve/CVE-2017-15706"
},
{
"category": "external",
"summary": "SUSE Bug 1078677 for CVE-2017-15706",
"url": "https://bugzilla.suse.com/1078677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-24T11:48:05Z",
"details": "low"
}
],
"title": "CVE-2017-15706"
},
{
"cve": "CVE-2018-11784",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-11784"
}
],
"notes": [
{
"category": "general",
"text": "When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to \u0027/foo/\u0027 when the user requested \u0027/foo\u0027) a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-11784",
"url": "https://www.suse.com/security/cve/CVE-2018-11784"
},
{
"category": "external",
"summary": "SUSE Bug 1110850 for CVE-2018-11784",
"url": "https://bugzilla.suse.com/1110850"
},
{
"category": "external",
"summary": "SUSE Bug 1122212 for CVE-2018-11784",
"url": "https://bugzilla.suse.com/1122212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-24T11:48:05Z",
"details": "moderate"
}
],
"title": "CVE-2018-11784"
},
{
"cve": "CVE-2018-1304",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1304"
}
],
"notes": [
{
"category": "general",
"text": "The URL pattern of \"\" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition. This caused the constraint to be ignored. It was, therefore, possible for unauthorised users to gain access to web application resources that should have been protected. Only security constraints with a URL pattern of the empty string were affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1304",
"url": "https://www.suse.com/security/cve/CVE-2018-1304"
},
{
"category": "external",
"summary": "SUSE Bug 1082480 for CVE-2018-1304",
"url": "https://bugzilla.suse.com/1082480"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-24T11:48:05Z",
"details": "moderate"
}
],
"title": "CVE-2018-1304"
},
{
"cve": "CVE-2018-1305",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1305"
}
],
"notes": [
{
"category": "general",
"text": "Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that point, it was possible - depending on the order Servlets were loaded - for some security constraints not to be applied. This could have exposed resources to users who were not authorised to access them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1305",
"url": "https://www.suse.com/security/cve/CVE-2018-1305"
},
{
"category": "external",
"summary": "SUSE Bug 1082481 for CVE-2018-1305",
"url": "https://bugzilla.suse.com/1082481"
},
{
"category": "external",
"summary": "SUSE Bug 1112097 for CVE-2018-1305",
"url": "https://bugzilla.suse.com/1112097"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-24T11:48:05Z",
"details": "moderate"
}
],
"title": "CVE-2018-1305"
},
{
"cve": "CVE-2018-1336",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1336"
}
],
"notes": [
{
"category": "general",
"text": "An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to 7.0.86.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1336",
"url": "https://www.suse.com/security/cve/CVE-2018-1336"
},
{
"category": "external",
"summary": "SUSE Bug 1102400 for CVE-2018-1336",
"url": "https://bugzilla.suse.com/1102400"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-24T11:48:05Z",
"details": "important"
}
],
"title": "CVE-2018-1336"
},
{
"cve": "CVE-2018-8014",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-8014"
}
],
"notes": [
{
"category": "general",
"text": "The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable \u0027supportsCredentials\u0027 for all origins. It is expected that users of the CORS filter will have configured it appropriately for their environment rather than using it in the default configuration. Therefore, it is expected that most users will not be impacted by this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-8014",
"url": "https://www.suse.com/security/cve/CVE-2018-8014"
},
{
"category": "external",
"summary": "SUSE Bug 1093697 for CVE-2018-8014",
"url": "https://bugzilla.suse.com/1093697"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-24T11:48:05Z",
"details": "low"
}
],
"title": "CVE-2018-8014"
},
{
"cve": "CVE-2018-8034",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-8034"
}
],
"notes": [
{
"category": "general",
"text": "The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-8034",
"url": "https://www.suse.com/security/cve/CVE-2018-8034"
},
{
"category": "external",
"summary": "SUSE Bug 1102379 for CVE-2018-8034",
"url": "https://bugzilla.suse.com/1102379"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-24T11:48:05Z",
"details": "moderate"
}
],
"title": "CVE-2018-8034"
},
{
"cve": "CVE-2018-8037",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-8037"
}
],
"notes": [
{
"category": "general",
"text": "If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not correctly track the closure of the connection when an async request was completed by the application and timed out by the container at the same time. This could also result in a user seeing a response intended for another user. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.9 and 8.5.5 to 8.5.31.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-8037",
"url": "https://www.suse.com/security/cve/CVE-2018-8037"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2018-8037",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1102410 for CVE-2018-8037",
"url": "https://bugzilla.suse.com/1102410"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server 12 SP1-LTSS:tomcat-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.53-10.35.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.53-10.35.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-24T11:48:05Z",
"details": "critical"
}
],
"title": "CVE-2018-8037"
}
]
}
SUSE-SU-2018:3393-1
Vulnerability from csaf_suse - Published: 2018-10-24 11:03 - Updated: 2018-10-24 11:03Summary
Security update for tomcat
Severity
Moderate
Notes
Title of the patch: Security update for tomcat
Description of the patch: This update for tomcat fixes the following issues:
- CVE-2018-11784: When the default servlet in Apache Tomcat returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice. (bsc#1110850)
Patchnames: SUSE-SLE-SERVER-12-SP3-2018-2429
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.1 (Medium)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:tomcat-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:tomcat-admin-webapps-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:tomcat-docs-webapp-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:tomcat-el-3_0-api-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:tomcat-javadoc-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:tomcat-lib-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3:tomcat-webapps-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-admin-webapps-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-docs-webapp-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-el-3_0-api-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-javadoc-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-lib-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-webapps-8.0.53-29.16.2.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for tomcat",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for tomcat fixes the following issues:\n\n- CVE-2018-11784: When the default servlet in Apache Tomcat returned a redirect to a directory (e.g. redirecting to \u0027/foo/\u0027 when the user requested \u0027/foo\u0027) a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice. (bsc#1110850)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-SERVER-12-SP3-2018-2429",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3393-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:3393-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183393-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:3393-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-October/004786.html"
},
{
"category": "self",
"summary": "SUSE Bug 1110850",
"url": "https://bugzilla.suse.com/1110850"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-11784 page",
"url": "https://www.suse.com/security/cve/CVE-2018-11784/"
}
],
"title": "Security update for tomcat",
"tracking": {
"current_release_date": "2018-10-24T11:03:46Z",
"generator": {
"date": "2018-10-24T11:03:46Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:3393-1",
"initial_release_date": "2018-10-24T11:03:46Z",
"revision_history": [
{
"date": "2018-10-24T11:03:46Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "tomcat-8.0.53-29.16.2.noarch",
"product": {
"name": "tomcat-8.0.53-29.16.2.noarch",
"product_id": "tomcat-8.0.53-29.16.2.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-admin-webapps-8.0.53-29.16.2.noarch",
"product": {
"name": "tomcat-admin-webapps-8.0.53-29.16.2.noarch",
"product_id": "tomcat-admin-webapps-8.0.53-29.16.2.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-docs-webapp-8.0.53-29.16.2.noarch",
"product": {
"name": "tomcat-docs-webapp-8.0.53-29.16.2.noarch",
"product_id": "tomcat-docs-webapp-8.0.53-29.16.2.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-el-3_0-api-8.0.53-29.16.2.noarch",
"product": {
"name": "tomcat-el-3_0-api-8.0.53-29.16.2.noarch",
"product_id": "tomcat-el-3_0-api-8.0.53-29.16.2.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-javadoc-8.0.53-29.16.2.noarch",
"product": {
"name": "tomcat-javadoc-8.0.53-29.16.2.noarch",
"product_id": "tomcat-javadoc-8.0.53-29.16.2.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch",
"product": {
"name": "tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch",
"product_id": "tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-lib-8.0.53-29.16.2.noarch",
"product": {
"name": "tomcat-lib-8.0.53-29.16.2.noarch",
"product_id": "tomcat-lib-8.0.53-29.16.2.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch",
"product": {
"name": "tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch",
"product_id": "tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-webapps-8.0.53-29.16.2.noarch",
"product": {
"name": "tomcat-webapps-8.0.53-29.16.2.noarch",
"product_id": "tomcat-webapps-8.0.53-29.16.2.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:tomcat-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:tomcat-admin-webapps-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-admin-webapps-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:tomcat-docs-webapp-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-docs-webapp-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-3_0-api-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:tomcat-el-3_0-api-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-el-3_0-api-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:tomcat-javadoc-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-javadoc-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:tomcat-lib-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-lib-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:tomcat-webapps-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-webapps-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-admin-webapps-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-admin-webapps-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-docs-webapp-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-docs-webapp-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-3_0-api-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-el-3_0-api-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-el-3_0-api-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-javadoc-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-javadoc-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-lib-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-lib-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-8.0.53-29.16.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-webapps-8.0.53-29.16.2.noarch"
},
"product_reference": "tomcat-webapps-8.0.53-29.16.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-11784",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-11784"
}
],
"notes": [
{
"category": "general",
"text": "When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to \u0027/foo/\u0027 when the user requested \u0027/foo\u0027) a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP3:tomcat-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-admin-webapps-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-docs-webapp-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-el-3_0-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-javadoc-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-lib-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-webapps-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-admin-webapps-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-docs-webapp-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-el-3_0-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-javadoc-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-lib-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-webapps-8.0.53-29.16.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-11784",
"url": "https://www.suse.com/security/cve/CVE-2018-11784"
},
{
"category": "external",
"summary": "SUSE Bug 1110850 for CVE-2018-11784",
"url": "https://bugzilla.suse.com/1110850"
},
{
"category": "external",
"summary": "SUSE Bug 1122212 for CVE-2018-11784",
"url": "https://bugzilla.suse.com/1122212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP3:tomcat-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-admin-webapps-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-docs-webapp-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-el-3_0-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-javadoc-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-lib-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-webapps-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-admin-webapps-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-docs-webapp-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-el-3_0-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-javadoc-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-lib-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-webapps-8.0.53-29.16.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP3:tomcat-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-admin-webapps-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-docs-webapp-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-el-3_0-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-javadoc-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-lib-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server 12 SP3:tomcat-webapps-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-admin-webapps-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-docs-webapp-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-el-3_0-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-javadoc-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-jsp-2_3-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-lib-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-servlet-3_1-api-8.0.53-29.16.2.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:tomcat-webapps-8.0.53-29.16.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-24T11:03:46Z",
"details": "moderate"
}
],
"title": "CVE-2018-11784"
}
]
}
SUSE-SU-2018:3935-1
Vulnerability from csaf_suse - Published: 2018-11-28 16:12 - Updated: 2018-11-28 16:12Summary
Security update for tomcat6
Severity
Moderate
Notes
Title of the patch: Security update for tomcat6
Description of the patch: This update for tomcat6 fixes the following issue:
Security issue fixed:
- CVE-2018-11784: Fixed problem with specially crafted URLs that could be used to cause a redirect to any URI of an attackers choise (bsc#1110850).
Patchnames: slessp4-tomcat6-13884
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.1 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.53-0.57.10.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for tomcat6",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for tomcat6 fixes the following issue:\n\nSecurity issue fixed:\n\n- CVE-2018-11784: Fixed problem with specially crafted URLs that could be used to cause a redirect to any URI of an attackers choise (bsc#1110850).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "slessp4-tomcat6-13884",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3935-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:3935-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183935-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:3935-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-November/004904.html"
},
{
"category": "self",
"summary": "SUSE Bug 1110850",
"url": "https://bugzilla.suse.com/1110850"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-11784 page",
"url": "https://www.suse.com/security/cve/CVE-2018-11784/"
}
],
"title": "Security update for tomcat6",
"tracking": {
"current_release_date": "2018-11-28T16:12:50Z",
"generator": {
"date": "2018-11-28T16:12:50Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:3935-1",
"initial_release_date": "2018-11-28T16:12:50Z",
"revision_history": [
{
"date": "2018-11-28T16:12:50Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "tomcat6-6.0.53-0.57.10.1.noarch",
"product": {
"name": "tomcat6-6.0.53-0.57.10.1.noarch",
"product_id": "tomcat6-6.0.53-0.57.10.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch",
"product": {
"name": "tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch",
"product_id": "tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch",
"product": {
"name": "tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch",
"product_id": "tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-javadoc-6.0.53-0.57.10.1.noarch",
"product": {
"name": "tomcat6-javadoc-6.0.53-0.57.10.1.noarch",
"product_id": "tomcat6-javadoc-6.0.53-0.57.10.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch",
"product": {
"name": "tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch",
"product_id": "tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-lib-6.0.53-0.57.10.1.noarch",
"product": {
"name": "tomcat6-lib-6.0.53-0.57.10.1.noarch",
"product_id": "tomcat6-lib-6.0.53-0.57.10.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch",
"product": {
"name": "tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch",
"product_id": "tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-webapps-6.0.53-0.57.10.1.noarch",
"product": {
"name": "tomcat6-webapps-6.0.53-0.57.10.1.noarch",
"product_id": "tomcat6-webapps-6.0.53-0.57.10.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-javadoc-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-lib-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-webapps-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-javadoc-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-lib-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-6.0.53-0.57.10.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.53-0.57.10.1.noarch"
},
"product_reference": "tomcat6-webapps-6.0.53-0.57.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-11784",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-11784"
}
],
"notes": [
{
"category": "general",
"text": "When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to \u0027/foo/\u0027 when the user requested \u0027/foo\u0027) a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.53-0.57.10.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-11784",
"url": "https://www.suse.com/security/cve/CVE-2018-11784"
},
{
"category": "external",
"summary": "SUSE Bug 1110850 for CVE-2018-11784",
"url": "https://bugzilla.suse.com/1110850"
},
{
"category": "external",
"summary": "SUSE Bug 1122212 for CVE-2018-11784",
"url": "https://bugzilla.suse.com/1122212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.53-0.57.10.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.53-0.57.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.53-0.57.10.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-11-28T16:12:50Z",
"details": "moderate"
}
],
"title": "CVE-2018-11784"
}
]
}
SUSE-SU-2018:3968-1
Vulnerability from csaf_suse - Published: 2018-12-03 14:33 - Updated: 2018-12-03 14:33Summary
Security update for tomcat
Severity
Moderate
Notes
Title of the patch: Security update for tomcat
Description of the patch:
This update for tomcat to 9.0.12 fixes the following issues:
See the full changelog at:
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
Security issues fixed:
- CVE-2018-11784: When the default servlet in Apache Tomcat returned
a redirect to a directory (e.g. redirecting to '/foo/' when the user
requested '/foo') a specially crafted URL could be used to cause the
redirect to be generated to any URI of the attackers choice. (bsc#1110850)
Patchnames: SUSE-SLE-Module-Development-Tools-OBS-15-2018-2823,SUSE-SLE-Module-Web-Scripting-15-2018-2823
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.1 (Medium)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-9.0.12-3.8.3.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-admin-webapps-9.0.12-3.8.3.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-el-3_0-api-9.0.12-3.8.3.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-jsp-2_3-api-9.0.12-3.8.3.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-lib-9.0.12-3.8.3.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-servlet-4_0-api-9.0.12-3.8.3.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-webapps-9.0.12-3.8.3.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for tomcat",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\n \nThis update for tomcat to 9.0.12 fixes the following issues:\n\nSee the full changelog at:\n http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)\n\nSecurity issues fixed:\n\n- CVE-2018-11784: When the default servlet in Apache Tomcat returned\n a redirect to a directory (e.g. redirecting to \u0027/foo/\u0027 when the user\n requested \u0027/foo\u0027) a specially crafted URL could be used to cause the\n redirect to be generated to any URI of the attackers choice. (bsc#1110850)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Module-Development-Tools-OBS-15-2018-2823,SUSE-SLE-Module-Web-Scripting-15-2018-2823",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3968-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:3968-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183968-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:3968-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183968-1.html"
},
{
"category": "self",
"summary": "SUSE Bug 1110850",
"url": "https://bugzilla.suse.com/1110850"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-11784 page",
"url": "https://www.suse.com/security/cve/CVE-2018-11784/"
}
],
"title": "Security update for tomcat",
"tracking": {
"current_release_date": "2018-12-03T14:33:18Z",
"generator": {
"date": "2018-12-03T14:33:18Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:3968-1",
"initial_release_date": "2018-12-03T14:33:18Z",
"revision_history": [
{
"date": "2018-12-03T14:33:18Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "tomcat-9.0.12-3.8.3.noarch",
"product": {
"name": "tomcat-9.0.12-3.8.3.noarch",
"product_id": "tomcat-9.0.12-3.8.3.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-admin-webapps-9.0.12-3.8.3.noarch",
"product": {
"name": "tomcat-admin-webapps-9.0.12-3.8.3.noarch",
"product_id": "tomcat-admin-webapps-9.0.12-3.8.3.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-el-3_0-api-9.0.12-3.8.3.noarch",
"product": {
"name": "tomcat-el-3_0-api-9.0.12-3.8.3.noarch",
"product_id": "tomcat-el-3_0-api-9.0.12-3.8.3.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-jsp-2_3-api-9.0.12-3.8.3.noarch",
"product": {
"name": "tomcat-jsp-2_3-api-9.0.12-3.8.3.noarch",
"product_id": "tomcat-jsp-2_3-api-9.0.12-3.8.3.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-lib-9.0.12-3.8.3.noarch",
"product": {
"name": "tomcat-lib-9.0.12-3.8.3.noarch",
"product_id": "tomcat-lib-9.0.12-3.8.3.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-servlet-4_0-api-9.0.12-3.8.3.noarch",
"product": {
"name": "tomcat-servlet-4_0-api-9.0.12-3.8.3.noarch",
"product_id": "tomcat-servlet-4_0-api-9.0.12-3.8.3.noarch"
}
},
{
"category": "product_version",
"name": "tomcat-webapps-9.0.12-3.8.3.noarch",
"product": {
"name": "tomcat-webapps-9.0.12-3.8.3.noarch",
"product_id": "tomcat-webapps-9.0.12-3.8.3.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Web and Scripting 15",
"product": {
"name": "SUSE Linux Enterprise Module for Web and Scripting 15",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-web-scripting:15"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-9.0.12-3.8.3.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-9.0.12-3.8.3.noarch"
},
"product_reference": "tomcat-9.0.12-3.8.3.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-9.0.12-3.8.3.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-admin-webapps-9.0.12-3.8.3.noarch"
},
"product_reference": "tomcat-admin-webapps-9.0.12-3.8.3.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-3_0-api-9.0.12-3.8.3.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-el-3_0-api-9.0.12-3.8.3.noarch"
},
"product_reference": "tomcat-el-3_0-api-9.0.12-3.8.3.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2_3-api-9.0.12-3.8.3.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-jsp-2_3-api-9.0.12-3.8.3.noarch"
},
"product_reference": "tomcat-jsp-2_3-api-9.0.12-3.8.3.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-9.0.12-3.8.3.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-lib-9.0.12-3.8.3.noarch"
},
"product_reference": "tomcat-lib-9.0.12-3.8.3.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-4_0-api-9.0.12-3.8.3.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-servlet-4_0-api-9.0.12-3.8.3.noarch"
},
"product_reference": "tomcat-servlet-4_0-api-9.0.12-3.8.3.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-9.0.12-3.8.3.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15",
"product_id": "SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-webapps-9.0.12-3.8.3.noarch"
},
"product_reference": "tomcat-webapps-9.0.12-3.8.3.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-11784",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-11784"
}
],
"notes": [
{
"category": "general",
"text": "When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to \u0027/foo/\u0027 when the user requested \u0027/foo\u0027) a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-admin-webapps-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-el-3_0-api-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-jsp-2_3-api-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-lib-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-servlet-4_0-api-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-webapps-9.0.12-3.8.3.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-11784",
"url": "https://www.suse.com/security/cve/CVE-2018-11784"
},
{
"category": "external",
"summary": "SUSE Bug 1110850 for CVE-2018-11784",
"url": "https://bugzilla.suse.com/1110850"
},
{
"category": "external",
"summary": "SUSE Bug 1122212 for CVE-2018-11784",
"url": "https://bugzilla.suse.com/1122212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-admin-webapps-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-el-3_0-api-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-jsp-2_3-api-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-lib-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-servlet-4_0-api-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-webapps-9.0.12-3.8.3.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-admin-webapps-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-el-3_0-api-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-jsp-2_3-api-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-lib-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-servlet-4_0-api-9.0.12-3.8.3.noarch",
"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-webapps-9.0.12-3.8.3.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-12-03T14:33:18Z",
"details": "moderate"
}
],
"title": "CVE-2018-11784"
}
]
}
WID-SEC-W-2023-0460
Vulnerability from csaf_certbund - Published: 2018-10-03 22:00 - Updated: 2023-02-22 23:00Summary
Apache Tomcat: Schwachstelle ermöglicht Manipulation von Dateien
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Apache Tomcat ist ein Web-Applikationsserver für verschiedene Plattformen.
Angriff: Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um Dateien zu manipulieren.
Betroffene Betriebssysteme: - UNIX
- Linux
- Windows
Es existiert eine Schwachstelle in Apache Tomcat. Die Schwachstelle beruht darauf, dass das Standard Servlet beim Aufruf eine Umleitung (redirect) zurückgibt. Ein Angreifer kann dieses nutzen und eine Umleitung auf beliebige Web Seiten durchzuführen. Zur erfolgreichen Ausnutzung dieser Schwachstelle ist eine Benutzeraktion erforderlich.
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
HPE HP-UX
HPE
|
cpe:/o:hp:hp-ux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
IBM FlashSystem 900
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:900
|
— | |
|
Open Source CentOS
Open Source
|
cpe:/o:centos:centos:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM FlashSystem 840
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:840
|
— |
References
18 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Apache Tomcat ist ein Web-Applikationsserver f\u00fcr verschiedene Plattformen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um Dateien zu manipulieren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- UNIX\n- Linux\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-0460 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2018/wid-sec-w-2023-0460.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-0460 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0460"
},
{
"category": "external",
"summary": "IBM Security Bulletin 957183 vom 2023-02-23",
"url": "https://www.ibm.com/support/pages/node/957183"
},
{
"category": "external",
"summary": "Meldung auf der Apache Mailing Liste vom 2018-10-03",
"url": "http://mail-archives.apache.org/mod_mbox/www-announce/201810.mbox/browser"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-3787-1 vom 2018-10-11",
"url": "http://www.ubuntu.com/usn/usn-3787-1"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:3261-1 vom 2018-10-21",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183261-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:3388-1 vom 2018-10-25",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183388-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:3393-1 vom 2018-10-25",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183393-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:3935-1 vom 2018-11-29",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183935-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:3968-1 vom 2018-12-04",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183968-1.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2019:0131 vom 2019-01-22",
"url": "https://access.redhat.com/errata/RHSA-2019:0131"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2019:0130 vom 2019-01-22",
"url": "https://access.redhat.com/errata/RHSA-2019:0130"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2019:0485 vom 2019-03-13",
"url": "https://access.redhat.com/errata/RHSA-2019:0485"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2019-0485 vom 2019-03-14",
"url": "http://linux.oracle.com/errata/ELSA-2019-0485.html"
},
{
"category": "external",
"summary": "CentOS Security Advisory CESA-2019:0485 vom 2019-03-19",
"url": "http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2019-0485-Moderate-CentOS-7-tomcat-Security-Update-tp4645460.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2019:1529 vom 2019-06-19",
"url": "https://access.redhat.com/errata/RHSA-2019:1529"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-4596 vom 2019-12-28",
"url": "https://www.debian.org/security/2019/dsa-4596"
},
{
"category": "external",
"summary": "Hewlett Packard Enterprise Support Center",
"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbux04015en_us"
}
],
"source_lang": "en-US",
"title": "Apache Tomcat: Schwachstelle erm\u00f6glicht Manipulation von Dateien",
"tracking": {
"current_release_date": "2023-02-22T23:00:00.000+00:00",
"generator": {
"date": "2024-08-15T17:44:41.535+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2023-0460",
"initial_release_date": "2018-10-03T22:00:00.000+00:00",
"revision_history": [
{
"date": "2018-10-03T22:00:00.000+00:00",
"number": "1",
"summary": "Initial Release"
},
{
"date": "2018-10-10T22:00:00.000+00:00",
"number": "2",
"summary": "New remediations available"
},
{
"date": "2018-10-15T22:00:00.000+00:00",
"number": "3",
"summary": "Added references"
},
{
"date": "2018-10-21T22:00:00.000+00:00",
"number": "4",
"summary": "New remediations available"
},
{
"date": "2018-10-24T22:00:00.000+00:00",
"number": "5",
"summary": "New remediations available"
},
{
"date": "2018-11-28T23:00:00.000+00:00",
"number": "6",
"summary": "New remediations available"
},
{
"date": "2018-12-03T23:00:00.000+00:00",
"number": "7",
"summary": "New remediations available"
},
{
"date": "2018-12-16T23:00:00.000+00:00",
"number": "8",
"summary": "Added references"
},
{
"date": "2019-01-22T23:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2019-03-13T23:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von Red Hat und Oracle Linux aufgenommen"
},
{
"date": "2019-03-19T23:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von CentOS aufgenommen"
},
{
"date": "2019-06-18T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2019-12-29T23:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2020-09-22T22:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von HP aufgenommen"
},
{
"date": "2023-02-22T23:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von IBM aufgenommen"
}
],
"status": "final",
"version": "15"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Apache Tomcat \u003c 7.0.91",
"product": {
"name": "Apache Tomcat \u003c 7.0.91",
"product_id": "T012829",
"product_identification_helper": {
"cpe": "cpe:/a:apache:tomcat:7.0.91"
}
}
},
{
"category": "product_name",
"name": "Apache Tomcat \u003c 8.5.34",
"product": {
"name": "Apache Tomcat \u003c 8.5.34",
"product_id": "T012830",
"product_identification_helper": {
"cpe": "cpe:/a:apache:tomcat:8.5.34"
}
}
},
{
"category": "product_name",
"name": "Apache Tomcat \u003c 9.0.12",
"product": {
"name": "Apache Tomcat \u003c 9.0.12",
"product_id": "T012831",
"product_identification_helper": {
"cpe": "cpe:/a:apache:tomcat:9.0.12"
}
}
}
],
"category": "product_name",
"name": "Tomcat"
}
],
"category": "vendor",
"name": "Apache"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "HPE HP-UX",
"product": {
"name": "HPE HP-UX",
"product_id": "4871",
"product_identification_helper": {
"cpe": "cpe:/o:hp:hp-ux:-"
}
}
}
],
"category": "vendor",
"name": "HPE"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "IBM FlashSystem 840",
"product": {
"name": "IBM FlashSystem 840",
"product_id": "T026432",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:flashsystem:840"
}
}
},
{
"category": "product_name",
"name": "IBM FlashSystem 900",
"product": {
"name": "IBM FlashSystem 900",
"product_id": "T026433",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:flashsystem:900"
}
}
}
],
"category": "product_name",
"name": "FlashSystem"
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source CentOS",
"product": {
"name": "Open Source CentOS",
"product_id": "1727",
"product_identification_helper": {
"cpe": "cpe:/o:centos:centos:-"
}
}
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-11784",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Apache Tomcat. Die Schwachstelle beruht darauf, dass das Standard Servlet beim Aufruf eine Umleitung (redirect) zur\u00fcckgibt. Ein Angreifer kann dieses nutzen und eine Umleitung auf beliebige Web Seiten durchzuf\u00fchren. Zur erfolgreichen Ausnutzung dieser Schwachstelle ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"67646",
"4871",
"T000126",
"T026433",
"1727",
"T004914",
"T026432"
]
},
"release_date": "2018-10-03T22:00:00.000+00:00",
"title": "CVE-2018-11784"
}
]
}
WID-SEC-W-2023-0531
Vulnerability from csaf_certbund - Published: 2019-02-25 23:00 - Updated: 2023-02-28 23:00Summary
IBM SAN Volume Controller: Mehrere Schwachstellen
Severity
Kritisch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Die IBM SAN Volume Controller Software wird mit SAN Volume Controller Storage Engines ausgliefert und dient zur Steuerung und Verwaltung von IBM SANs. Zur Verwaltung bietet sie ein Webinterface.
IBM Storwize ist ein virtualisiertes Speichersystem für virtualisierte Serverumgebungen.
Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
Betroffene Betriebssysteme: - Applicance
In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadenshöhe erfolgt ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für die Produkte ist "High" für "Integrity", "Confidentiality" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM SAN Volume Controller < 8.2.1.0
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.1.0
|
— | |
|
IBM Storwize V5000
IBM
|
cpe:/h:ibm:storwize_v5000:-
|
— | |
|
IBM Storwize < 7.8.1.8
IBM / Storwize
|
cpe:/a:ibm:storwize:7.8.1.8
|
— | |
|
IBM SAN Volume Controller
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:-
|
— | |
|
IBM SAN Volume Controller < 8.2.0.2
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.0.2
|
— | |
|
IBM Storwize V3500
IBM
|
cpe:/h:ibm:storwize_v3500:-
|
— | |
|
IBM Storwize V3700
IBM
|
cpe:/h:ibm:storwize_v3700:-
|
— | |
|
IBM SAN Volume Controller < 7.8.1.8
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:7.8.1.8
|
— | |
|
IBM FlashSystem < 8.2.1.0
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.1.0
|
— | |
|
IBM SAN Volume Controller < 8.1.3.4
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.1.3.4
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.2.0.2
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.0.2
|
— | |
|
IBM Storwize < 8.2.1.0
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.1.0
|
— | |
|
IBM Storwize V7000
IBM
|
cpe:/h:ibm:storwize_v7000:-
|
— | |
|
IBM FlashSystem < 7.8.1.8
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:7.8.1.8
|
— | |
|
IBM Storwize < 8.1.3.4
IBM / Storwize
|
cpe:/a:ibm:storwize:8.1.3.4
|
— | |
|
IBM Storwize < 8.2.0.2
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.0.2
|
— |
In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadenshöhe erfolgt ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für die Produkte ist "High" für "Integrity", "Confidentiality" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM SAN Volume Controller < 8.2.1.0
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.1.0
|
— | |
|
IBM Storwize V5000
IBM
|
cpe:/h:ibm:storwize_v5000:-
|
— | |
|
IBM Storwize < 7.8.1.8
IBM / Storwize
|
cpe:/a:ibm:storwize:7.8.1.8
|
— | |
|
IBM SAN Volume Controller
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:-
|
— | |
|
IBM SAN Volume Controller < 8.2.0.2
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.0.2
|
— | |
|
IBM Storwize V3500
IBM
|
cpe:/h:ibm:storwize_v3500:-
|
— | |
|
IBM Storwize V3700
IBM
|
cpe:/h:ibm:storwize_v3700:-
|
— | |
|
IBM SAN Volume Controller < 7.8.1.8
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:7.8.1.8
|
— | |
|
IBM FlashSystem < 8.2.1.0
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.1.0
|
— | |
|
IBM SAN Volume Controller < 8.1.3.4
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.1.3.4
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.2.0.2
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.0.2
|
— | |
|
IBM Storwize < 8.2.1.0
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.1.0
|
— | |
|
IBM Storwize V7000
IBM
|
cpe:/h:ibm:storwize_v7000:-
|
— | |
|
IBM FlashSystem < 7.8.1.8
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:7.8.1.8
|
— | |
|
IBM Storwize < 8.1.3.4
IBM / Storwize
|
cpe:/a:ibm:storwize:8.1.3.4
|
— | |
|
IBM Storwize < 8.2.0.2
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.0.2
|
— |
In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadenshöhe erfolgt ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für die Produkte ist "High" für "Integrity", "Confidentiality" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM SAN Volume Controller < 8.2.1.0
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.1.0
|
— | |
|
IBM Storwize V5000
IBM
|
cpe:/h:ibm:storwize_v5000:-
|
— | |
|
IBM Storwize < 7.8.1.8
IBM / Storwize
|
cpe:/a:ibm:storwize:7.8.1.8
|
— | |
|
IBM SAN Volume Controller
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:-
|
— | |
|
IBM SAN Volume Controller < 8.2.0.2
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.0.2
|
— | |
|
IBM Storwize V3500
IBM
|
cpe:/h:ibm:storwize_v3500:-
|
— | |
|
IBM Storwize V3700
IBM
|
cpe:/h:ibm:storwize_v3700:-
|
— | |
|
IBM SAN Volume Controller < 7.8.1.8
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:7.8.1.8
|
— | |
|
IBM FlashSystem < 8.2.1.0
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.1.0
|
— | |
|
IBM SAN Volume Controller < 8.1.3.4
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.1.3.4
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.2.0.2
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.0.2
|
— | |
|
IBM Storwize < 8.2.1.0
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.1.0
|
— | |
|
IBM Storwize V7000
IBM
|
cpe:/h:ibm:storwize_v7000:-
|
— | |
|
IBM FlashSystem < 7.8.1.8
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:7.8.1.8
|
— | |
|
IBM Storwize < 8.1.3.4
IBM / Storwize
|
cpe:/a:ibm:storwize:8.1.3.4
|
— | |
|
IBM Storwize < 8.2.0.2
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.0.2
|
— |
In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadenshöhe erfolgt ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für die Produkte ist "High" für "Integrity", "Confidentiality" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM SAN Volume Controller < 8.2.1.0
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.1.0
|
— | |
|
IBM Storwize V5000
IBM
|
cpe:/h:ibm:storwize_v5000:-
|
— | |
|
IBM Storwize < 7.8.1.8
IBM / Storwize
|
cpe:/a:ibm:storwize:7.8.1.8
|
— | |
|
IBM SAN Volume Controller
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:-
|
— | |
|
IBM SAN Volume Controller < 8.2.0.2
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.0.2
|
— | |
|
IBM Storwize V3500
IBM
|
cpe:/h:ibm:storwize_v3500:-
|
— | |
|
IBM Storwize V3700
IBM
|
cpe:/h:ibm:storwize_v3700:-
|
— | |
|
IBM SAN Volume Controller < 7.8.1.8
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:7.8.1.8
|
— | |
|
IBM FlashSystem < 8.2.1.0
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.1.0
|
— | |
|
IBM SAN Volume Controller < 8.1.3.4
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.1.3.4
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.2.0.2
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.0.2
|
— | |
|
IBM Storwize < 8.2.1.0
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.1.0
|
— | |
|
IBM Storwize V7000
IBM
|
cpe:/h:ibm:storwize_v7000:-
|
— | |
|
IBM FlashSystem < 7.8.1.8
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:7.8.1.8
|
— | |
|
IBM Storwize < 8.1.3.4
IBM / Storwize
|
cpe:/a:ibm:storwize:8.1.3.4
|
— | |
|
IBM Storwize < 8.2.0.2
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.0.2
|
— |
In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadenshöhe erfolgt ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für die Produkte ist "High" für "Integrity", "Confidentiality" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM SAN Volume Controller < 8.2.1.0
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.1.0
|
— | |
|
IBM Storwize V5000
IBM
|
cpe:/h:ibm:storwize_v5000:-
|
— | |
|
IBM Storwize < 7.8.1.8
IBM / Storwize
|
cpe:/a:ibm:storwize:7.8.1.8
|
— | |
|
IBM SAN Volume Controller
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:-
|
— | |
|
IBM SAN Volume Controller < 8.2.0.2
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.0.2
|
— | |
|
IBM Storwize V3500
IBM
|
cpe:/h:ibm:storwize_v3500:-
|
— | |
|
IBM Storwize V3700
IBM
|
cpe:/h:ibm:storwize_v3700:-
|
— | |
|
IBM SAN Volume Controller < 7.8.1.8
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:7.8.1.8
|
— | |
|
IBM FlashSystem < 8.2.1.0
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.1.0
|
— | |
|
IBM SAN Volume Controller < 8.1.3.4
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.1.3.4
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.2.0.2
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.0.2
|
— | |
|
IBM Storwize < 8.2.1.0
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.1.0
|
— | |
|
IBM Storwize V7000
IBM
|
cpe:/h:ibm:storwize_v7000:-
|
— | |
|
IBM FlashSystem < 7.8.1.8
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:7.8.1.8
|
— | |
|
IBM Storwize < 8.1.3.4
IBM / Storwize
|
cpe:/a:ibm:storwize:8.1.3.4
|
— | |
|
IBM Storwize < 8.2.0.2
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.0.2
|
— |
In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadenshöhe erfolgt ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für die Produkte ist "High" für "Integrity", "Confidentiality" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM SAN Volume Controller < 8.2.1.0
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.1.0
|
— | |
|
IBM Storwize V5000
IBM
|
cpe:/h:ibm:storwize_v5000:-
|
— | |
|
IBM Storwize < 7.8.1.8
IBM / Storwize
|
cpe:/a:ibm:storwize:7.8.1.8
|
— | |
|
IBM SAN Volume Controller
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:-
|
— | |
|
IBM SAN Volume Controller < 8.2.0.2
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.0.2
|
— | |
|
IBM Storwize V3500
IBM
|
cpe:/h:ibm:storwize_v3500:-
|
— | |
|
IBM Storwize V3700
IBM
|
cpe:/h:ibm:storwize_v3700:-
|
— | |
|
IBM SAN Volume Controller < 7.8.1.8
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:7.8.1.8
|
— | |
|
IBM FlashSystem < 8.2.1.0
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.1.0
|
— | |
|
IBM SAN Volume Controller < 8.1.3.4
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.1.3.4
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.2.0.2
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.0.2
|
— | |
|
IBM Storwize < 8.2.1.0
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.1.0
|
— | |
|
IBM Storwize V7000
IBM
|
cpe:/h:ibm:storwize_v7000:-
|
— | |
|
IBM FlashSystem < 7.8.1.8
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:7.8.1.8
|
— | |
|
IBM Storwize < 8.1.3.4
IBM / Storwize
|
cpe:/a:ibm:storwize:8.1.3.4
|
— | |
|
IBM Storwize < 8.2.0.2
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.0.2
|
— |
In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadenshöhe erfolgt ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für die Produkte ist "High" für "Integrity", "Confidentiality" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM SAN Volume Controller < 8.2.1.0
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.1.0
|
— | |
|
IBM Storwize V5000
IBM
|
cpe:/h:ibm:storwize_v5000:-
|
— | |
|
IBM Storwize < 7.8.1.8
IBM / Storwize
|
cpe:/a:ibm:storwize:7.8.1.8
|
— | |
|
IBM SAN Volume Controller
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:-
|
— | |
|
IBM SAN Volume Controller < 8.2.0.2
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.0.2
|
— | |
|
IBM Storwize V3500
IBM
|
cpe:/h:ibm:storwize_v3500:-
|
— | |
|
IBM Storwize V3700
IBM
|
cpe:/h:ibm:storwize_v3700:-
|
— | |
|
IBM SAN Volume Controller < 7.8.1.8
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:7.8.1.8
|
— | |
|
IBM FlashSystem < 8.2.1.0
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.1.0
|
— | |
|
IBM SAN Volume Controller < 8.1.3.4
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.1.3.4
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.2.0.2
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.0.2
|
— | |
|
IBM Storwize < 8.2.1.0
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.1.0
|
— | |
|
IBM Storwize V7000
IBM
|
cpe:/h:ibm:storwize_v7000:-
|
— | |
|
IBM FlashSystem < 7.8.1.8
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:7.8.1.8
|
— | |
|
IBM Storwize < 8.1.3.4
IBM / Storwize
|
cpe:/a:ibm:storwize:8.1.3.4
|
— | |
|
IBM Storwize < 8.2.0.2
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.0.2
|
— |
In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadenshöhe erfolgt ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für die Produkte ist "High" für "Integrity", "Confidentiality" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM SAN Volume Controller < 8.2.1.0
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.1.0
|
— | |
|
IBM Storwize V5000
IBM
|
cpe:/h:ibm:storwize_v5000:-
|
— | |
|
IBM Storwize < 7.8.1.8
IBM / Storwize
|
cpe:/a:ibm:storwize:7.8.1.8
|
— | |
|
IBM SAN Volume Controller
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:-
|
— | |
|
IBM SAN Volume Controller < 8.2.0.2
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.0.2
|
— | |
|
IBM Storwize V3500
IBM
|
cpe:/h:ibm:storwize_v3500:-
|
— | |
|
IBM Storwize V3700
IBM
|
cpe:/h:ibm:storwize_v3700:-
|
— | |
|
IBM SAN Volume Controller < 7.8.1.8
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:7.8.1.8
|
— | |
|
IBM FlashSystem < 8.2.1.0
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.1.0
|
— | |
|
IBM SAN Volume Controller < 8.1.3.4
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.1.3.4
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.2.0.2
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.0.2
|
— | |
|
IBM Storwize < 8.2.1.0
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.1.0
|
— | |
|
IBM Storwize V7000
IBM
|
cpe:/h:ibm:storwize_v7000:-
|
— | |
|
IBM FlashSystem < 7.8.1.8
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:7.8.1.8
|
— | |
|
IBM Storwize < 8.1.3.4
IBM / Storwize
|
cpe:/a:ibm:storwize:8.1.3.4
|
— | |
|
IBM Storwize < 8.2.0.2
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.0.2
|
— |
In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadenshöhe erfolgt ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für die Produkte ist "High" für "Integrity", "Confidentiality" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM SAN Volume Controller < 8.2.1.0
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.1.0
|
— | |
|
IBM Storwize V5000
IBM
|
cpe:/h:ibm:storwize_v5000:-
|
— | |
|
IBM Storwize < 7.8.1.8
IBM / Storwize
|
cpe:/a:ibm:storwize:7.8.1.8
|
— | |
|
IBM SAN Volume Controller
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:-
|
— | |
|
IBM SAN Volume Controller < 8.2.0.2
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.2.0.2
|
— | |
|
IBM Storwize V3500
IBM
|
cpe:/h:ibm:storwize_v3500:-
|
— | |
|
IBM Storwize V3700
IBM
|
cpe:/h:ibm:storwize_v3700:-
|
— | |
|
IBM SAN Volume Controller < 7.8.1.8
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:7.8.1.8
|
— | |
|
IBM FlashSystem < 8.2.1.0
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.1.0
|
— | |
|
IBM SAN Volume Controller < 8.1.3.4
IBM / SAN Volume Controller
|
cpe:/a:ibm:san_volume_controller:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.1.3.4
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.1.3.4
|
— | |
|
IBM FlashSystem < 8.2.0.2
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:8.2.0.2
|
— | |
|
IBM Storwize < 8.2.1.0
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.1.0
|
— | |
|
IBM Storwize V7000
IBM
|
cpe:/h:ibm:storwize_v7000:-
|
— | |
|
IBM FlashSystem < 7.8.1.8
IBM / FlashSystem
|
cpe:/a:ibm:flashsystem:7.8.1.8
|
— | |
|
IBM Storwize < 8.1.3.4
IBM / Storwize
|
cpe:/a:ibm:storwize:8.1.3.4
|
— | |
|
IBM Storwize < 8.2.0.2
IBM / Storwize
|
cpe:/a:ibm:storwize:8.2.0.2
|
— |
References
9 references
{
"document": {
"aggregate_severity": {
"text": "kritisch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Die IBM SAN Volume Controller Software wird mit SAN Volume Controller Storage Engines ausgliefert und dient zur Steuerung und Verwaltung von IBM SANs. Zur Verwaltung bietet sie ein Webinterface.\r\nIBM Storwize ist ein virtualisiertes Speichersystem f\u00fcr virtualisierte Serverumgebungen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 ausnutzen, um dadurch die Integrit\u00e4t, Vertraulichkeit und Verf\u00fcgbarkeit zu gef\u00e4hrden.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Applicance",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-0531 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2019/wid-sec-w-2023-0531.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-0531 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0531"
},
{
"category": "external",
"summary": "IBM Security Bulletin 872546 vom 2023-02-17",
"url": "http://www.ibm.com/support/pages/node/872546"
},
{
"category": "external",
"summary": "IBM Security Bulletins vom 2019-02-25",
"url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10872550"
},
{
"category": "external",
"summary": "IBM Security Bulletins vom 2019-02-25",
"url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10872546"
},
{
"category": "external",
"summary": "IBM Security Bulletins vom 2019-02-25",
"url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10872486"
},
{
"category": "external",
"summary": "IBM Security Bulletins vom 2019-02-25",
"url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10872364"
},
{
"category": "external",
"summary": "IBM Security Bulletins vom 2019-02-25",
"url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10872456"
},
{
"category": "external",
"summary": "IBM Security Bulletins vom 2019-02-25",
"url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10741135"
}
],
"source_lang": "en-US",
"title": "IBM SAN Volume Controller: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-02-28T23:00:00.000+00:00",
"generator": {
"date": "2024-08-15T17:45:55.866+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2023-0531",
"initial_release_date": "2019-02-25T23:00:00.000+00:00",
"revision_history": [
{
"date": "2019-02-25T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2023-02-28T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von IBM aufgenommen"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "IBM FlashSystem \u003c 7.8.1.8",
"product": {
"name": "IBM FlashSystem \u003c 7.8.1.8",
"product_id": "T026586",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:flashsystem:7.8.1.8"
}
}
},
{
"category": "product_name",
"name": "IBM FlashSystem \u003c 8.1.3.4",
"product": {
"name": "IBM FlashSystem \u003c 8.1.3.4",
"product_id": "T026587",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:flashsystem:8.1.3.4"
}
}
},
{
"category": "product_name",
"name": "IBM FlashSystem \u003c 8.2.0.2",
"product": {
"name": "IBM FlashSystem \u003c 8.2.0.2",
"product_id": "T026588",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:flashsystem:8.2.0.2"
}
}
},
{
"category": "product_name",
"name": "IBM FlashSystem \u003c 8.2.1.0",
"product": {
"name": "IBM FlashSystem \u003c 8.2.1.0",
"product_id": "T026589",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:flashsystem:8.2.1.0"
}
}
}
],
"category": "product_name",
"name": "FlashSystem"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM SAN Volume Controller",
"product": {
"name": "IBM SAN Volume Controller",
"product_id": "T002782",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:san_volume_controller:-"
}
}
},
{
"category": "product_name",
"name": "IBM SAN Volume Controller \u003c 7.8.1.8",
"product": {
"name": "IBM SAN Volume Controller \u003c 7.8.1.8",
"product_id": "T026578",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:san_volume_controller:7.8.1.8"
}
}
},
{
"category": "product_name",
"name": "IBM SAN Volume Controller \u003c 8.1.3.4",
"product": {
"name": "IBM SAN Volume Controller \u003c 8.1.3.4",
"product_id": "T026579",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:san_volume_controller:8.1.3.4"
}
}
},
{
"category": "product_name",
"name": "IBM SAN Volume Controller \u003c 8.2.0.2",
"product": {
"name": "IBM SAN Volume Controller \u003c 8.2.0.2",
"product_id": "T026580",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:san_volume_controller:8.2.0.2"
}
}
},
{
"category": "product_name",
"name": "IBM SAN Volume Controller \u003c 8.2.1.0",
"product": {
"name": "IBM SAN Volume Controller \u003c 8.2.1.0",
"product_id": "T026581",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:san_volume_controller:8.2.1.0"
}
}
}
],
"category": "product_name",
"name": "SAN Volume Controller"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM Storwize \u003c 7.8.1.8",
"product": {
"name": "IBM Storwize \u003c 7.8.1.8",
"product_id": "T026582",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:storwize:7.8.1.8"
}
}
},
{
"category": "product_name",
"name": "IBM Storwize \u003c 8.1.3.4",
"product": {
"name": "IBM Storwize \u003c 8.1.3.4",
"product_id": "T026583",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:storwize:8.1.3.4"
}
}
},
{
"category": "product_name",
"name": "IBM Storwize \u003c 8.2.0.2",
"product": {
"name": "IBM Storwize \u003c 8.2.0.2",
"product_id": "T026584",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:storwize:8.2.0.2"
}
}
},
{
"category": "product_name",
"name": "IBM Storwize \u003c 8.2.1.0",
"product": {
"name": "IBM Storwize \u003c 8.2.1.0",
"product_id": "T026585",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:storwize:8.2.1.0"
}
}
}
],
"category": "product_name",
"name": "Storwize"
},
{
"category": "product_name",
"name": "IBM Storwize V3500",
"product": {
"name": "IBM Storwize V3500",
"product_id": "T002778",
"product_identification_helper": {
"cpe": "cpe:/h:ibm:storwize_v3500:-"
}
}
},
{
"category": "product_name",
"name": "IBM Storwize V3700",
"product": {
"name": "IBM Storwize V3700",
"product_id": "T002779",
"product_identification_helper": {
"cpe": "cpe:/h:ibm:storwize_v3700:-"
}
}
},
{
"category": "product_name",
"name": "IBM Storwize V5000",
"product": {
"name": "IBM Storwize V5000",
"product_id": "T002780",
"product_identification_helper": {
"cpe": "cpe:/h:ibm:storwize_v5000:-"
}
}
},
{
"category": "product_name",
"name": "IBM Storwize V7000",
"product": {
"name": "IBM Storwize V7000",
"product_id": "T000482",
"product_identification_helper": {
"cpe": "cpe:/h:ibm:storwize_v7000:-"
}
}
}
],
"category": "vendor",
"name": "IBM"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-17449",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2017-17449"
},
{
"cve": "CVE-2017-17833",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2017-17833"
},
{
"cve": "CVE-2017-18017",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2017-18017"
},
{
"cve": "CVE-2018-11784",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2018-11784"
},
{
"cve": "CVE-2018-12539",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2018-12539"
},
{
"cve": "CVE-2018-1517",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2018-1517"
},
{
"cve": "CVE-2018-1775",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2018-1775"
},
{
"cve": "CVE-2018-2783",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2018-2783"
},
{
"cve": "CVE-2018-5732",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2018-5732"
}
]
}
WID-SEC-W-2024-0528
Vulnerability from csaf_certbund - Published: 2024-02-29 23:00 - Updated: 2024-02-29 23:00Summary
Dell Data Protection Advisor: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Data Protection Advisor ist eine Monitoring Lösung. Der Collector ist der lokale Agent.
Angriff: Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Berechtigungen zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Betroffene Betriebssysteme: - Windows
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.
References
3 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Data Protection Advisor ist eine Monitoring L\u00f6sung. Der Collector ist der lokale Agent.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Berechtigungen zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-0528 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0528.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-0528 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0528"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2024-107 vom 2024-02-29",
"url": "https://www.dell.com/support/kbdoc/000222618/dsa-2024-="
}
],
"source_lang": "en-US",
"title": "Dell Data Protection Advisor: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-02-29T23:00:00.000+00:00",
"generator": {
"date": "2024-08-15T18:05:58.480+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2024-0528",
"initial_release_date": "2024-02-29T23:00:00.000+00:00",
"revision_history": [
{
"date": "2024-02-29T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c 19.10",
"product": {
"name": "Dell Data Protection Advisor \u003c 19.10",
"product_id": "T033198"
}
}
],
"category": "product_name",
"name": "Data Protection Advisor"
}
],
"category": "vendor",
"name": "Dell"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-45648",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2023-45648"
},
{
"cve": "CVE-2023-42795",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2023-42795"
},
{
"cve": "CVE-2023-41080",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2023-41080"
},
{
"cve": "CVE-2023-34055",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2023-34055"
},
{
"cve": "CVE-2023-28708",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2023-28708"
},
{
"cve": "CVE-2023-28154",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2023-28154"
},
{
"cve": "CVE-2023-22081",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2023-22081"
},
{
"cve": "CVE-2023-22067",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2023-22067"
},
{
"cve": "CVE-2023-22025",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2023-22025"
},
{
"cve": "CVE-2023-20883",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2023-20883"
},
{
"cve": "CVE-2023-20873",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2023-20873"
},
{
"cve": "CVE-2023-20863",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2023-20863"
},
{
"cve": "CVE-2023-20861",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2023-20861"
},
{
"cve": "CVE-2022-46175",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-46175"
},
{
"cve": "CVE-2022-41854",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-41854"
},
{
"cve": "CVE-2022-38752",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-38752"
},
{
"cve": "CVE-2022-38751",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-38751"
},
{
"cve": "CVE-2022-38750",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-38750"
},
{
"cve": "CVE-2022-38749",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-38749"
},
{
"cve": "CVE-2022-37603",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-37603"
},
{
"cve": "CVE-2022-37601",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-37601"
},
{
"cve": "CVE-2022-37599",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-37599"
},
{
"cve": "CVE-2022-31129",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-31129"
},
{
"cve": "CVE-2022-27772",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-27772"
},
{
"cve": "CVE-2022-25881",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-25881"
},
{
"cve": "CVE-2022-25858",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-25858"
},
{
"cve": "CVE-2022-22971",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-22971"
},
{
"cve": "CVE-2022-22970",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-22970"
},
{
"cve": "CVE-2022-22968",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-22968"
},
{
"cve": "CVE-2022-22965",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-22965"
},
{
"cve": "CVE-2022-22950",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2022-22950"
},
{
"cve": "CVE-2021-43980",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2021-43980"
},
{
"cve": "CVE-2021-33037",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2021-33037"
},
{
"cve": "CVE-2021-30640",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2021-30640"
},
{
"cve": "CVE-2020-5421",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2020-5421"
},
{
"cve": "CVE-2020-1938",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2020-1938"
},
{
"cve": "CVE-2020-1935",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2020-1935"
},
{
"cve": "CVE-2020-13943",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2020-13943"
},
{
"cve": "CVE-2020-13935",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2020-13935"
},
{
"cve": "CVE-2020-13934",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2020-13934"
},
{
"cve": "CVE-2020-11996",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2020-11996"
},
{
"cve": "CVE-2019-2684",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2019-2684"
},
{
"cve": "CVE-2019-17563",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2019-17563"
},
{
"cve": "CVE-2019-12418",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2019-12418"
},
{
"cve": "CVE-2019-10072",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2019-10072"
},
{
"cve": "CVE-2019-0232",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2019-0232"
},
{
"cve": "CVE-2019-0221",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2019-0221"
},
{
"cve": "CVE-2019-0199",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2019-0199"
},
{
"cve": "CVE-2018-8037",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-8037"
},
{
"cve": "CVE-2018-8034",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-8034"
},
{
"cve": "CVE-2018-8014",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-8014"
},
{
"cve": "CVE-2018-15756",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-15756"
},
{
"cve": "CVE-2018-1336",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-1336"
},
{
"cve": "CVE-2018-1305",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-1305"
},
{
"cve": "CVE-2018-1304",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-1304"
},
{
"cve": "CVE-2018-1275",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-1275"
},
{
"cve": "CVE-2018-1272",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-1272"
},
{
"cve": "CVE-2018-1271",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-1271"
},
{
"cve": "CVE-2018-1270",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-1270"
},
{
"cve": "CVE-2018-1257",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-1257"
},
{
"cve": "CVE-2018-1199",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-1199"
},
{
"cve": "CVE-2018-1196",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-1196"
},
{
"cve": "CVE-2018-11784",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-11784"
},
{
"cve": "CVE-2018-11040",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-11040"
},
{
"cve": "CVE-2018-11039",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2018-11039"
},
{
"cve": "CVE-2017-8046",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2017-8046"
},
{
"cve": "CVE-2017-7675",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2017-7675"
},
{
"cve": "CVE-2017-7674",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2017-7674"
},
{
"cve": "CVE-2017-5664",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2017-5664"
},
{
"cve": "CVE-2017-5651",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2017-5651"
},
{
"cve": "CVE-2017-5650",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2017-5650"
},
{
"cve": "CVE-2017-5648",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2017-5648"
},
{
"cve": "CVE-2017-5647",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2017-5647"
},
{
"cve": "CVE-2017-18640",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2017-18640"
},
{
"cve": "CVE-2017-12617",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2017-12617"
},
{
"cve": "CVE-2016-9878",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2016-9878"
},
{
"cve": "CVE-2016-8745",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2016-8745"
},
{
"cve": "CVE-2016-8735",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2016-8735"
},
{
"cve": "CVE-2016-6817",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2016-6817"
},
{
"cve": "CVE-2016-6816",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Dell Data Protection Advisor. Diese Fehler bestehen in den Komponenten von Drittanbietern wie Apache Tomcat, Java SE oder Spring Framework und anderen aufgrund mehrerer sicherheitsrelevanter Probleme. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Rechte zu erweitern oder einen nicht spezifizierten Angriff durchzuf\u00fchren."
}
],
"release_date": "2024-02-29T23:00:00.000+00:00",
"title": "CVE-2016-6816"
}
]
}
WID-SEC-W-2024-1682
Vulnerability from csaf_certbund - Published: 2019-04-16 22:00 - Updated: 2024-07-21 22:00Summary
Oracle Retail Applications: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Oracle Retail Allocation ist ein Verwaltungswerkzeug.
Oracle MICROS bietet eine Reihe von Software, Hardware und Dienstleistungen zusammen mit schnell wachsenden Cloud Lösungen für Abrechnung und Verwaltung in Unternehmen des Hotel- und Gaststättengewerbes, Reiseveranstalter und Veranstaltern von Kreuzfahrten sowie in Unternehmen der Freizeit- und Unterhaltungsbranche.
Oracle Invoice Matching ist ein Tool zum Verwalten von Lieferantenrechnungen.
Angriff: Ein Angreifer kann mehrere Schwachstellen in Oracle Retail Applications ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
Betroffene Betriebssysteme: - Linux
- UNIX
- Windows
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Confidentiality", "Integrity" und "Availability" und bewirkt damit eine "hohe" Schadenshöhe.
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Retail Invoice Matching 13.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.1
|
13.1 | |
|
Oracle Retail Invoice Matching 14.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.0
|
14 | |
|
Oracle Retail MICROS 11.4
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:11.4
|
11.4 | |
|
Oracle Retail MICROS 12.1.2
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:12.1.2
|
12.1.2 | |
|
Oracle Retail MICROS 2.9.5.6
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.6
|
2.9.5.6 | |
|
Oracle Retail MICROS 2.9.5.7
Oracle / Retail MICROS
|
cpe:/a:oracle:micros:2.9.5.7
|
2.9.5.7 | |
|
Oracle Retail Invoice Matching 15.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:15.0
|
15 | |
|
Oracle Retail Allocation 15.0.2
Oracle / Retail Allocation
|
cpe:/a:oracle:retail_allocation:15.0.2
|
15.0.2 | |
|
Oracle Retail Invoice Matching 14.1
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:14.1
|
14.1 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:-
|
— | |
|
Oracle Retail Xstore Point of Service 7.1
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.1
|
7.1 | |
|
Oracle Retail Workforce Management 1.60.9.0.0
Oracle / Retail Workforce Management
|
cpe:/a:oracle:retail_workforce_management:1.60.9.0.0
|
1.60.9.0.0 | |
|
Oracle Retail Xstore Point of Service 7.0
Oracle / Retail Xstore Point of Service
|
cpe:/a:oracle:retail_point-of-service:7.0
|
7 | |
|
Oracle Retail Invoice Matching 13.2
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.2
|
13.2 | |
|
Oracle Retail Invoice Matching 13.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:13.0
|
13 | |
|
Oracle Retail Invoice Matching 12.0
Oracle / Retail Invoice Matching
|
cpe:/a:oracle:retail_invoice_matching:12.0
|
12 |
References
4 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Oracle Retail Allocation ist ein Verwaltungswerkzeug.\r\nOracle MICROS bietet eine Reihe von Software, Hardware und Dienstleistungen zusammen mit schnell wachsenden Cloud L\u00f6sungen f\u00fcr Abrechnung und Verwaltung in Unternehmen des Hotel- und Gastst\u00e4ttengewerbes, Reiseveranstalter und Veranstaltern von Kreuzfahrten sowie in Unternehmen der Freizeit- und Unterhaltungsbranche.\r\nOracle Invoice Matching ist ein Tool zum Verwalten von Lieferantenrechnungen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Oracle Retail Applications ausnutzen, um dadurch die Integrit\u00e4t, Vertraulichkeit und Verf\u00fcgbarkeit zu gef\u00e4hrden.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-1682 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2019/wid-sec-w-2024-1682.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-1682 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1682"
},
{
"category": "external",
"summary": "Oracle Critical Patch Update Advisory - April 2019 vom 2019-04-16",
"url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html#AppendixRAPP"
},
{
"category": "external",
"summary": "NetApp Security Advisory NTAP-20240719-0002 vom 2024-07-19",
"url": "https://security.netapp.com/advisory/ntap-20240719-0002/"
}
],
"source_lang": "en-US",
"title": "Oracle Retail Applications: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-07-21T22:00:00.000+00:00",
"generator": {
"date": "2024-08-15T18:11:37.885+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2024-1682",
"initial_release_date": "2019-04-16T22:00:00.000+00:00",
"revision_history": [
{
"date": "2019-04-16T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-07-21T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von NetApp aufgenommen"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "NetApp ActiveIQ Unified Manager",
"product": {
"name": "NetApp ActiveIQ Unified Manager",
"product_id": "T034125",
"product_identification_helper": {
"cpe": "cpe:/a:netapp:active_iq_unified_manager:-"
}
}
}
],
"category": "vendor",
"name": "NetApp"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "15.0.2",
"product": {
"name": "Oracle Retail Allocation 15.0.2",
"product_id": "T014004",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:retail_allocation:15.0.2"
}
}
}
],
"category": "product_name",
"name": "Retail Allocation"
},
{
"branches": [
{
"category": "product_version",
"name": "12",
"product": {
"name": "Oracle Retail Invoice Matching 12.0",
"product_id": "T001982",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:retail_invoice_matching:12.0"
}
}
},
{
"category": "product_version",
"name": "13",
"product": {
"name": "Oracle Retail Invoice Matching 13.0",
"product_id": "T001985",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:retail_invoice_matching:13.0"
}
}
},
{
"category": "product_version",
"name": "13.2",
"product": {
"name": "Oracle Retail Invoice Matching 13.2",
"product_id": "T001987",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:retail_invoice_matching:13.2"
}
}
},
{
"category": "product_version",
"name": "14",
"product": {
"name": "Oracle Retail Invoice Matching 14.0",
"product_id": "T004005",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:retail_invoice_matching:14.0"
}
}
},
{
"category": "product_version",
"name": "13.1",
"product": {
"name": "Oracle Retail Invoice Matching 13.1",
"product_id": "T004011",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:retail_invoice_matching:13.1"
}
}
},
{
"category": "product_version",
"name": "15",
"product": {
"name": "Oracle Retail Invoice Matching 15.0",
"product_id": "T012089",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:retail_invoice_matching:15.0"
}
}
},
{
"category": "product_version",
"name": "14.1",
"product": {
"name": "Oracle Retail Invoice Matching 14.1",
"product_id": "T014012",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:retail_invoice_matching:14.1"
}
}
}
],
"category": "product_name",
"name": "Retail Invoice Matching"
},
{
"branches": [
{
"category": "product_version",
"name": "2.9.5.6",
"product": {
"name": "Oracle Retail MICROS 2.9.5.6",
"product_id": "T014005",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:micros:2.9.5.6"
}
}
},
{
"category": "product_version",
"name": "2.9.5.7",
"product": {
"name": "Oracle Retail MICROS 2.9.5.7",
"product_id": "T014006",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:micros:2.9.5.7"
}
}
},
{
"category": "product_version",
"name": "11.4",
"product": {
"name": "Oracle Retail MICROS 11.4",
"product_id": "T014007",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:micros:11.4"
}
}
},
{
"category": "product_version",
"name": "12.1.2",
"product": {
"name": "Oracle Retail MICROS 12.1.2",
"product_id": "T014008",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:micros:12.1.2"
}
}
}
],
"category": "product_name",
"name": "Retail MICROS"
},
{
"branches": [
{
"category": "product_version",
"name": "1.60.9.0.0",
"product": {
"name": "Oracle Retail Workforce Management 1.60.9.0.0",
"product_id": "T014013",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:retail_workforce_management:1.60.9.0.0"
}
}
}
],
"category": "product_name",
"name": "Retail Workforce Management"
},
{
"branches": [
{
"category": "product_version",
"name": "7",
"product": {
"name": "Oracle Retail Xstore Point of Service 7.0",
"product_id": "T012096",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:retail_point-of-service:7.0"
}
}
},
{
"category": "product_version",
"name": "7.1",
"product": {
"name": "Oracle Retail Xstore Point of Service 7.1",
"product_id": "T012099",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:retail_point-of-service:7.1"
}
}
}
],
"category": "product_name",
"name": "Retail Xstore Point of Service"
}
],
"category": "vendor",
"name": "Oracle"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-9515",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2014-9515"
},
{
"cve": "CVE-2015-9251",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2015-9251"
},
{
"cve": "CVE-2016-1000031",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2016-1000031"
},
{
"cve": "CVE-2017-5533",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-5533"
},
{
"cve": "CVE-2018-1000180",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-1000180"
},
{
"cve": "CVE-2018-1000613",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-1000613"
},
{
"cve": "CVE-2018-11763",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-11763"
},
{
"cve": "CVE-2018-11784",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-11784"
},
{
"cve": "CVE-2018-12022",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-12022"
},
{
"cve": "CVE-2018-12023",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-12023"
},
{
"cve": "CVE-2018-1304",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-1304"
},
{
"cve": "CVE-2018-1305",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-1305"
},
{
"cve": "CVE-2018-14718",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-14718"
},
{
"cve": "CVE-2018-14719",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-14719"
},
{
"cve": "CVE-2018-14720",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-14720"
},
{
"cve": "CVE-2018-14721",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-14721"
},
{
"cve": "CVE-2018-15756",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-15756"
},
{
"cve": "CVE-2018-19360",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-19360"
},
{
"cve": "CVE-2018-19361",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-19361"
},
{
"cve": "CVE-2018-19362",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-19362"
},
{
"cve": "CVE-2018-2880",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-2880"
},
{
"cve": "CVE-2018-3120",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-3120"
},
{
"cve": "CVE-2018-3312",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-3312"
},
{
"cve": "CVE-2018-3314",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-3314"
},
{
"cve": "CVE-2018-7489",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-7489"
},
{
"cve": "CVE-2018-8034",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-8034"
},
{
"cve": "CVE-2019-2424",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2019-2424"
},
{
"cve": "CVE-2019-2558",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2019-2558"
},
{
"cve": "CVE-2019-3772",
"notes": [
{
"category": "description",
"text": "In Oracle Retail Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T004011",
"T004005",
"T014007",
"T014008",
"T014005",
"T014006",
"T012089",
"T014004",
"T014012",
"T034125",
"T012099",
"T014013",
"T012096",
"T001987",
"T001985",
"T001982"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2019-3772"
}
]
}
WID-SEC-W-2025-1212
Vulnerability from csaf_certbund - Published: 2019-04-16 22:00 - Updated: 2025-06-02 22:00Summary
Oracle Communications Applications: Mehrere Schwachstellen
Severity
Mittel
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Mit der Unified Communications Suite bietet Oracle eine Messaging- und Collaboration-Plattform an.
Oracle Communications Policy Management ist ein Produkt von Oracle und vereint mehrere Bereiche der Kommunikation.
Oracle Communications Unified Inventory Management (UIM) ist eine offene, standardbasierte Anwendung, die eine Bestandsaufnahme von Kommunikationsdiensten und -ressourcen ermöglicht.
Angriff: Ein Angreifer kann mehrere Schwachstellen in Oracle Communications Applications ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
Betroffene Betriebssysteme: - Linux
- UNIX
- Windows
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Communications Policy Management 12.2
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.2
|
12.2 | |
|
Oracle Communications Unified Inventory Management 7.4.0
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.4.0
|
7.4.0 | |
|
Oracle Communications LSMS 13.3
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.3
|
13.3 | |
|
Oracle Communications Unified Inventory Management 7.3.4
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.4
|
7.3.4 | |
|
Oracle Communications LSMS 13.1
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.1
|
13.1 | |
|
Oracle Communications Messaging Server 8.1
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.1
|
8.1 | |
|
Oracle Communications EAGLE LNP Application Processor 10.2
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2
|
10.2 | |
|
Oracle Communications Unified Inventory Management 7.3.5
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.5
|
7.3.5 | |
|
Oracle Communications LSMS 13.2
Oracle / Communications LSMS
|
cpe:/a:oracle:communications_lsms:13.2
|
13.2 | |
|
Oracle Communications Unified Inventory Management 7.3.2
oracle / communications_unified_inventory_management
|
cpe:/a:oracle:communications_unified_inventory_management:7.3.2
|
7.3.2 | |
|
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0
|
10 | |
|
Oracle Communications Session Border Controller 8.1.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.1.0
|
8.1.0 | |
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Communications EAGLE LNP Application Processor 10.1
Oracle / Communications EAGLE LNP Application Processor
|
cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1
|
10.1 | |
|
Oracle Communications Session Border Controller 8.0.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.0.0
|
8.0.0 | |
|
Oracle Communications Policy Management 12.4
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.4
|
12.4 | |
|
Oracle Communications Session Border Controller 8.2.0
Oracle / Communications Session Border Controller
|
cpe:/a:oracle:communications_session_border_controller:8.2.0
|
8.2.0 | |
|
Oracle Communications Policy Management 12.1
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.1
|
12.1 | |
|
Oracle Communications Policy Management 12.3
Oracle / Communications Policy Management
|
cpe:/a:oracle:communications_policy_management:12.3
|
12.3 | |
|
Oracle Enterprise Communications Broker 3.1.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.1.0
|
3.1.0 | |
|
Oracle Communications Messaging Server 8.0
Oracle / Communications Messaging Server
|
cpe:/a:oracle:communications_messaging_server:8.0
|
8 | |
|
Oracle Enterprise Communications Broker 3.0.0
Oracle / Enterprise Communications Broker
|
cpe:/a:oracle:enterprise_communications_broker:3.0.0
|
3.0.0 | |
|
Oracle Communications Service Broker 6.0
Oracle / Communications Service Broker
|
cpe:/a:oracle:communications_service_broker:6.0
|
6 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
References
5 references
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Mit der Unified Communications Suite bietet Oracle eine Messaging- und Collaboration-Plattform an.\r\nOracle Communications Policy Management ist ein Produkt von Oracle und vereint mehrere Bereiche der Kommunikation.\r\nOracle Communications Unified Inventory Management (UIM) ist eine offene, standardbasierte Anwendung, die eine Bestandsaufnahme von Kommunikationsdiensten und -ressourcen erm\u00f6glicht.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Oracle Communications Applications ausnutzen, um dadurch die Integrit\u00e4t, Vertraulichkeit und Verf\u00fcgbarkeit zu gef\u00e4hrden.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-1212 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2019/wid-sec-w-2025-1212.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-1212 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1212"
},
{
"category": "external",
"summary": "Oracle Critical Patch Update Advisory - April 2019 vom 2019-04-16",
"url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html#AppendixCGBU"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4218-1 vom 2019-12-11",
"url": "https://usn.ubuntu.com/4218-1/"
},
{
"category": "external",
"summary": "XEROX Security Advisory XRX25-012 vom 2025-06-02",
"url": "https://security.business.xerox.com/wp-content/uploads/2025/06/Xerox-Security-Bulletin-XRX25-012-for-Xerox-FreeFlow-Print-Server-v9.pdf"
}
],
"source_lang": "en-US",
"title": "Oracle Communications Applications: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-06-02T22:00:00.000+00:00",
"generator": {
"date": "2025-06-03T09:23:36.426+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.12"
}
},
"id": "WID-SEC-W-2025-1212",
"initial_release_date": "2019-04-16T22:00:00.000+00:00",
"revision_history": [
{
"date": "2019-04-16T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2019-04-17T22:00:00.000+00:00",
"number": "2",
"summary": "Schreibfehler korrigiert"
},
{
"date": "2019-12-10T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-06-02T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von XEROX aufgenommen"
}
],
"status": "final",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "10",
"product": {
"name": "Oracle Communications EAGLE LNP Application Processor 10.0",
"product_id": "T014014",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_eagle_lnp_application_processor:10.0"
}
}
},
{
"category": "product_version",
"name": "10.1",
"product": {
"name": "Oracle Communications EAGLE LNP Application Processor 10.1",
"product_id": "T014015",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_eagle_lnp_application_processor:10.1"
}
}
},
{
"category": "product_version",
"name": "10.2",
"product": {
"name": "Oracle Communications EAGLE LNP Application Processor 10.2",
"product_id": "T014016",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_eagle_lnp_application_processor:10.2"
}
}
}
],
"category": "product_name",
"name": "Communications EAGLE LNP Application Processor"
},
{
"branches": [
{
"category": "product_version",
"name": "13.1",
"product": {
"name": "Oracle Communications LSMS 13.1",
"product_id": "T006217",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_lsms:13.1"
}
}
},
{
"category": "product_version",
"name": "13.2",
"product": {
"name": "Oracle Communications LSMS 13.2",
"product_id": "T014017",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_lsms:13.2"
}
}
},
{
"category": "product_version",
"name": "13.3",
"product": {
"name": "Oracle Communications LSMS 13.3",
"product_id": "T014018",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_lsms:13.3"
}
}
}
],
"category": "product_name",
"name": "Communications LSMS"
},
{
"branches": [
{
"category": "product_version",
"name": "8.1",
"product": {
"name": "Oracle Communications Messaging Server 8.1",
"product_id": "T014019",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_messaging_server:8.1"
}
}
},
{
"category": "product_version",
"name": "8",
"product": {
"name": "Oracle Communications Messaging Server 8.0",
"product_id": "T014020",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_messaging_server:8.0"
}
}
}
],
"category": "product_name",
"name": "Communications Messaging Server"
},
{
"branches": [
{
"category": "product_version",
"name": "12.2",
"product": {
"name": "Oracle Communications Policy Management 12.2",
"product_id": "T009732",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_policy_management:12.2"
}
}
},
{
"category": "product_version",
"name": "12.1",
"product": {
"name": "Oracle Communications Policy Management 12.1",
"product_id": "T014021",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_policy_management:12.1"
}
}
},
{
"category": "product_version",
"name": "12.3",
"product": {
"name": "Oracle Communications Policy Management 12.3",
"product_id": "T014022",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_policy_management:12.3"
}
}
},
{
"category": "product_version",
"name": "12.4",
"product": {
"name": "Oracle Communications Policy Management 12.4",
"product_id": "T014023",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_policy_management:12.4"
}
}
}
],
"category": "product_name",
"name": "Communications Policy Management"
},
{
"branches": [
{
"category": "product_version",
"name": "6",
"product": {
"name": "Oracle Communications Service Broker 6.0",
"product_id": "329193",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_service_broker:6.0"
}
}
}
],
"category": "product_name",
"name": "Communications Service Broker"
},
{
"branches": [
{
"category": "product_version",
"name": "8.2.0",
"product": {
"name": "Oracle Communications Session Border Controller 8.2.0",
"product_id": "T014024",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_session_border_controller:8.2.0"
}
}
},
{
"category": "product_version",
"name": "8.1.0",
"product": {
"name": "Oracle Communications Session Border Controller 8.1.0",
"product_id": "T014025",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_session_border_controller:8.1.0"
}
}
},
{
"category": "product_version",
"name": "8.0.0",
"product": {
"name": "Oracle Communications Session Border Controller 8.0.0",
"product_id": "T014026",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_session_border_controller:8.0.0"
}
}
}
],
"category": "product_name",
"name": "Communications Session Border Controller"
},
{
"branches": [
{
"category": "product_version",
"name": "3.1.0",
"product": {
"name": "Oracle Enterprise Communications Broker 3.1.0",
"product_id": "T014030",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:enterprise_communications_broker:3.1.0"
}
}
},
{
"category": "product_version",
"name": "3.0.0",
"product": {
"name": "Oracle Enterprise Communications Broker 3.0.0",
"product_id": "T014031",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:enterprise_communications_broker:3.0.0"
}
}
}
],
"category": "product_name",
"name": "Enterprise Communications Broker"
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "9",
"product": {
"name": "Xerox FreeFlow Print Server 9",
"product_id": "T002977",
"product_identification_helper": {
"cpe": "cpe:/a:xerox:freeflow_print_server:9"
}
}
}
],
"category": "product_name",
"name": "FreeFlow Print Server"
}
],
"category": "vendor",
"name": "Xerox"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "7.4.0",
"product": {
"name": "Oracle Communications Unified Inventory Management 7.4.0",
"product_id": "T013407",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_unified_inventory_management:7.4.0"
}
}
},
{
"category": "product_version",
"name": "7.3.5",
"product": {
"name": "Oracle Communications Unified Inventory Management 7.3.5",
"product_id": "T014027",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_unified_inventory_management:7.3.5"
}
}
},
{
"category": "product_version",
"name": "7.3.2",
"product": {
"name": "Oracle Communications Unified Inventory Management 7.3.2",
"product_id": "T014028",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_unified_inventory_management:7.3.2"
}
}
},
{
"category": "product_version",
"name": "7.3.4",
"product": {
"name": "Oracle Communications Unified Inventory Management 7.3.4",
"product_id": "T014029",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:communications_unified_inventory_management:7.3.4"
}
}
}
],
"category": "product_name",
"name": "communications_unified_inventory_management"
}
],
"category": "vendor",
"name": "oracle"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-9251",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2015-9251"
},
{
"cve": "CVE-2016-1000031",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2016-1000031"
},
{
"cve": "CVE-2016-1181",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2016-1181"
},
{
"cve": "CVE-2016-1182",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2016-1182"
},
{
"cve": "CVE-2016-7055",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2016-7055"
},
{
"cve": "CVE-2016-8735",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2016-8735"
},
{
"cve": "CVE-2017-0861",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-0861"
},
{
"cve": "CVE-2017-12617",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-12617"
},
{
"cve": "CVE-2017-15265",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-15265"
},
{
"cve": "CVE-2017-3730",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-3730"
},
{
"cve": "CVE-2017-3731",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-3731"
},
{
"cve": "CVE-2017-3732",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-3732"
},
{
"cve": "CVE-2017-3733",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-3733"
},
{
"cve": "CVE-2017-3735",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-3735"
},
{
"cve": "CVE-2017-3736",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-3736"
},
{
"cve": "CVE-2017-3738",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-3738"
},
{
"cve": "CVE-2017-5645",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-5645"
},
{
"cve": "CVE-2017-5664",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-5664"
},
{
"cve": "CVE-2017-5753",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-5753"
},
{
"cve": "CVE-2017-5754",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-5754"
},
{
"cve": "CVE-2017-7525",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2017-7525"
},
{
"cve": "CVE-2018-0732",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-0732"
},
{
"cve": "CVE-2018-0733",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-0733"
},
{
"cve": "CVE-2018-0734",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-0734"
},
{
"cve": "CVE-2018-0737",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-0737"
},
{
"cve": "CVE-2018-0739",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-0739"
},
{
"cve": "CVE-2018-1000004",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-1000004"
},
{
"cve": "CVE-2018-1000180",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-1000180"
},
{
"cve": "CVE-2018-1000613",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-1000613"
},
{
"cve": "CVE-2018-10901",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-10901"
},
{
"cve": "CVE-2018-11039",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-11039"
},
{
"cve": "CVE-2018-11040",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-11040"
},
{
"cve": "CVE-2018-11218",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-11218"
},
{
"cve": "CVE-2018-11219",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-11219"
},
{
"cve": "CVE-2018-11236",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-11236"
},
{
"cve": "CVE-2018-11237",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-11237"
},
{
"cve": "CVE-2018-11784",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-11784"
},
{
"cve": "CVE-2018-12384",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-12384"
},
{
"cve": "CVE-2018-12404",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-12404"
},
{
"cve": "CVE-2018-1257",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-1257"
},
{
"cve": "CVE-2018-1258",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-1258"
},
{
"cve": "CVE-2018-16864",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-16864"
},
{
"cve": "CVE-2018-16865",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-16865"
},
{
"cve": "CVE-2018-16890",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-16890"
},
{
"cve": "CVE-2018-3620",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-3620"
},
{
"cve": "CVE-2018-3646",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-3646"
},
{
"cve": "CVE-2018-3693",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-3693"
},
{
"cve": "CVE-2018-6485",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-6485"
},
{
"cve": "CVE-2018-7489",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-7489"
},
{
"cve": "CVE-2018-7566",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2018-7566"
},
{
"cve": "CVE-2019-3822",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2019-3822"
},
{
"cve": "CVE-2019-3823",
"product_status": {
"known_affected": [
"T009732",
"T013407",
"T014018",
"T014029",
"T006217",
"T014019",
"T014016",
"T014027",
"T014017",
"T014028",
"T014014",
"T014025",
"T002977",
"T014015",
"T014026",
"T014023",
"T014024",
"T014021",
"T014022",
"T014030",
"T014020",
"T014031",
"329193",
"T000126"
]
},
"release_date": "2019-04-16T22:00:00.000+00:00",
"title": "CVE-2019-3823"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…