Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Vulnerabilities fixed in Oracle Commerce

🗓️ 17 Oct 2024 13:17:19Reported by NCSCType 
ncsc
 ncsc🔗 advisories.ncsc.nl👁 2 Views

Oracle fixed Commerce vulnerabilities enabling denial of service, data manipulation, sensitive data access, or arbitrary code execution.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Multipe vulnerabilities in DITA may affect IBM Business Automation Workflow Case Management docGenerator feature (CVE-2023-2976, CVE-2022-44729, CVE-2022-44730)
12 Dec 202309:49
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities of Apache HttpClient have affected IBM Jazz Reporting Service
4 Oct 202310:31
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Apache HttpClient and Eclipse Jetty Affect IBM Control Center (CVE-2020-13956, CVE-2020-27218)
14 May 202121:15
–ibm
IBM Security Bulletins		Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a sensitive information exposure in Google Guava [CVE-2023-2976]
29 Sep 202320:53
–ibm
IBM Security Bulletins		Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to remote attack due to Apache Derby (CVE-2022-46337)
1 Apr 202418:07
–ibm
IBM Security Bulletins		Security Bulletin: Use of Java's default temporary directory for file creation in `FileBackedOutputStream` allows other users and apps to be able to access the files created by the class, which affects IBM watsonx.data
29 Aug 202514:29
–ibm
IBM Security Bulletins		Security Bulletin: Denial of Service in Apache Commons Compress used by Apache Solr affect IBM Operations Analytics - Log Analysis (CVE-2024-25710, CVE-2024-26308)
28 Apr 202509:21
–ibm
IBM Security Bulletins		Security Bulletin: A security vulnerability has been identified in Apache HttpClient shipped with IBM Tivoli Netcool Impact (CVE-2020-13956)
6 Oct 202204:37
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Apache and Node.js affect IBM Spectrum Protect Plus
24 Apr 202106:55
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerability with OpenJDK, commons-compress and spring-web-5.3.27/spring-web-5.3.32 affect IBM Cloud Object Storage Systems (April 2024v1)
1 Apr 202416:26
–ibm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Oct 2024 13:17Current
7.8High risk
Vulners AI Score7.8
CVSS 26.5
CVSS 3.19.8
CVSS 35.9
EPSS0.21539
SSVC
oracle commercedenial of servicedata manipulationsensitive data accessarbitrary code executionuser privilegesadministrator privileges
2