CVE-2022-21466

CVE-2022-21466 affects Oracle Commerce Guided Search (Tools and Frameworks) in Oracle Commerce 11.3.2. The vulnerability allows an unauthenticated, network-accessible attacker via HTTP to access or compromise Oracle Commerce Guided Search, with Confidentiality impact described as High and other i...

CVE-2022-21387

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2022-21387

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Unspecified Vulnerability in Oracle Commerce Platform

Oracle Commerce Platform is Oracle's omnichannel technology that creates a seamless customer experience and integrates data from various customer channels. A security vulnerability exists in Oracle Commerce Platform versions 11.0.0, 11.1.0, 11.2.0, 11.3.0-11.3.2. An attacker could exploit this...

Oracle Commerce 输入验证错误漏洞

Oracle Commerce is a suite of e-business solutions from Oracle Corporation. An input validation error vulnerability exists in Oracle Commerce Service Center, which can be exploited by an unauthenticated attacker to compromise Oracle Commerce Service Center via HTTP web access.The following produc...

Oracle Commerce 输入验证错误漏洞

Oracle Commerce Platform is Oracle's omnichannel technology that creates a seamless customer experience and integrates data from various customer channels. A security vulnerability exists in Oracle Commerce Platform versions 11.0.0, 11.1.0, 11.2.0, 11.3.0-11.3.2. An attacker could exploit this...

Novell ZENworks Configuration Management < 11.3.2 Arbitrary File Upload Vulnerability - Active Check

ZENworks Configuration Management is prone to an unauthenticated arbitrary file upload vulnerability SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Novell ZENworks Configuration Management 11.3.1 - Remote Code Execution

Novell ZENworks Configuration Management 11.3.1 - Remote Code Execution Remote code execution in Novell ZENworks Configuration Management 11.3.1 Discovered by Pedro Ribeiro [email protected], Agile Information Security ===============================================================================...