Vulnerabilities fixed in Oracle Construction and Engineering

🗓️ 19 Jul 2023 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 17 Views

Vulnerabilities fixed in Oracle Construction and Engineering products to prevent DoS and remote code execution.

Reporter	Title	Published	Views	Family All 1012
vulnersOsv	africa.absa:inception-test (>=1.0.0 <=1.2.0), ai.apiverse:apipulse (=1.0.1) +15397 more potentially affected by CVE-2023-1370 via net.minidev:json-smart (>=1.0.6.3 <=2.4.8)	23 Mar 202320:32	–	vulnersosv
vulnersOsv	ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0 <=4.4.0.1), ai.dev-tools:ai-devtools (>=0.1.12 <=0.1.20) +35885 more potentially affected by CVE-2023-20863 via org.springframework:spring-expression (>=3.0.0.RELEASE <=5.2.23.RELEASE)	13 Apr 202321:30	–	vulnersosv
vulnersOsv	be.atbash.test:integration-testing (>=1.0.0 <=1.1.0), com.codbex.chronos:codbex-chronos-platform (>=0.3.0 <=0.5.4) +1091 more potentially affected by CVE-2022-46364 via org.apache.cxf:cxf-core (>=3.5.0 <=3.5.4)	13 Dec 202218:30	–	vulnersosv
vulnersOsv	acegisecurity:acegi-security (>=0.8.2 <=0.9.0), acegisecurity:acegi-security-cas (=0.9.0) +15108 more potentially affected by CVE-2021-37533 via commons-net:commons-net (>=1.0.0 <=3.8.0)	3 Dec 202215:30	–	vulnersosv
vulnersOsv	-temp-electron-manager-somiibo (=0.0.200), 003-gas-convert (=1.0.1) +20893 more potentially affected by CVE-2022-48285 via jszip (>=0.2.1 <=3.7.1)	29 Jan 202306:30	–	vulnersosv
vulnersOsv	com.intuit.karate:karate-gatling (=1.3.1), com.intuit.karate:karate-junit4 (=1.3.1) +4 more potentially affected by CVE-2023-1370 via com.intuit.karate:karate-core (=1.3.1)	31 Mar 202322:44	–	vulnersosv
vulnersOsv	ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0 <=1.1.0), ai.stainless:grails-tika (=0.1.0) +2685 more potentially affected by CVE-2022-46364 via org.apache.cxf:cxf-core (>=3.0.0-milestone1 <=3.4.1)	13 Dec 202218:30	–	vulnersosv
vulnersOsv	africa.absa:inception-api (>=1.1.0 <=1.2.0), africa.absa:inception-application (>=1.1.0 <=1.2.0) +20175 more potentially affected by CVE-2023-20863 via org.springframework:spring-expression (>=5.3.0 <=5.3.26)	13 Apr 202321:30	–	vulnersosv
vulnersOsv	ai.ancf.lmos:arc-runner (>=0.1.1 <=0.120.0), ai.bizone:json-transform (>=1.0.0 <=1.16.0) +5216 more potentially affected by CVE-2023-1370 +1 more via net.minidev:json-smart (>=2.5.0 <=2.5.1)	6 Feb 202506:31	–	vulnersosv
vulnersOsv	ai.ancf.lmos:arc-runner (>=0.1.1 <=0.120.0), ai.bizone:json-transform (>=1.0.0 <=1.16.0) +5216 more potentially affected by CVE-2023-1370 +1 more via net.minidev:json-smart (>=2.5.0 <=2.5.1)	6 Feb 202506:31	–	vulnersosv

19 Jul 2023 00:00Current

8High risk

Vulners AI Score8

CVSS 3.19.8

EPSS0.46836

SSVC

Oracle Construction Primavera Gateway Primavera P6 Primavera Unifier Denial of service Remote code execution Data access