org.infinispan:infinispan-distribution (>=15.0.0.dev01, <=15.0.0.dev06), org.infinispan:infinispan-docs (>=15.0.0.dev01, <=15.0.0.dev06) +9 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-remote (>=15.0.0.dev01, <=15.0.0.dev06)

org.infinispan:infinispan-cachestore-remote MAVEN version =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev06 Source cves: CVE-2023-5384 Source advisory:...

org.infinispan:infinispan-distribution (>=15.0.0.dev01, <=15.0.0.dev06), org.infinispan:infinispan-docs (>=15.0.0.dev01, <=15.0.0.dev06) +8 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (>=15.0.0.dev01, <=15.0.0.dev06)

org.infinispan:infinispan-cachestore-jdbc MAVEN version =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev06 Source cves: CVE-2023-5384 Source advisory: MEND:CVE-2023-5384...

com.buession.cas:buession-cas-ticket (>=2.3.0, <=2.3.2), com.buession.cas:buession-cas-ticket-infinispan (>=2.3.0, <=2.3.2) +79 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-remote (>=5.2.0.beta6, <=14.0.24.final)

org.infinispan:infinispan-cachestore-remote MAVEN version =5.2.0.beta6, =2.3.0, =2.3.0, =2.3.0, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =1.1.0, =1.2.0, =2.0.1-23.0, =0.1.0, =2.5.0.cr1, =3.2.0.final and more Source cves: CVE-2023-5384 Source advisory: MEND:CVE-2023-5384...

io.quarkus:quarkus-test-infinispan-client (>=2.5.0.cr1, <=3.2.0.final), org.commonjava.indy.boot:indy-booter-jaxrs (>=1.9.9, <=3.2.3) +115 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (>=5.2.0.cr2, <=14.0.24.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version =5.2.0.cr2, =2.5.0.cr1, =1.9.9, =1.3.1, =1.6.0, =1.9.9, =1.9.9, =1.9.9, =1.9.9, =1.9.9, =1.9.9, =1.9.9, =1.9.9, =2.6.0, =1.9.9, =3.0.0, =3.4.5 and more Source cves: CVE-2023-5384 Source advisory: MEND:CVE-2023-5384...

io.quarkus:quarkus-test-infinispan-client (>=2.5.0.cr1, <=3.2.0.final), org.infinispan:infinispan-distribution (>=13.0.0.final, <=14.0.24.final) +9 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-sql (>=13.0.0.cr2, <=14.0.24.final)

org.infinispan:infinispan-cachestore-sql MAVEN version =13.0.0.cr2, =2.5.0.cr1, =13.0.0.final, =13.0.0.final, =13.0.0.cr2, =13.0.0.cr2, =13.0.0.cr2, =13.0.0.cr2, =13.0.0.cr2, =13.0.0.cr2, =14.0.10.final, =13.0.0.cr2, =14.0.24.final Source cves: CVE-2023-5384 Source advisory: MEND:CVE-2023-5384...

org.infinispan:infinispan-distribution (>=15.0.0.dev01, <=15.0.0.dev06), org.infinispan:infinispan-docs (>=15.0.0.dev01, <=15.0.0.dev06) +9 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-remote (>=15.0.0.dev01, <=15.0.0.dev06)

org.infinispan:infinispan-cachestore-remote MAVEN version =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev06 Source cves: CVE-2023-5384 Source advisory:...

io.quarkus:quarkus-test-infinispan-client (>=2.5.0.cr1, <=3.2.0.final), org.infinispan:infinispan-cachestore-jdbc (>=13.0.0.cr1, <=14.0.24.final) +16 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc-common (>=13.0.0.cr1, <=14.0.24.final)

org.infinispan:infinispan-cachestore-jdbc-common MAVEN version =13.0.0.cr1, =2.5.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =13.0.0.cr1, =14.0.10.final, =13.0.0.cr1, =14.0.24.final and more...

org.infinispan:infinispan-cachestore-jdbc (>=15.0.0.dev01, <=15.0.0.dev06), org.infinispan:infinispan-cachestore-sql (>=15.0.0.dev01, <=15.0.0.dev06) +10 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc-common (>=15.0.0.dev01, <=15.0.0.dev06)

org.infinispan:infinispan-cachestore-jdbc-common MAVEN version =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev06 Source cves: CVE-2023-5384 Source...

org.infinispan:infinispan-distribution (>=15.0.0.dev01, <=15.0.0.dev06), org.infinispan:infinispan-javadoc-all (>=15.0.0.dev01, <=15.0.0.dev06) +7 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-sql (>=15.0.0.dev01, <=15.0.0.dev06)

org.infinispan:infinispan-cachestore-sql MAVEN version =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev06 Source cves: CVE-2023-5384 Source advisory: MEND:CVE-2023-5384...

Oracle Coherence CacheStore DoS

The vulnerability of the CacheStore component of the Oracle Coherence software platform relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Oracle Coherence (July 2020 CPU)

The version of the Oracle Coherence installed on the remote host is missing a critical patch update. It is, therefore, affected by a vulnerability, as referenced in the July 2020 Oracle CPU advisory. - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: CacheStore...

CVE-2020-14642

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: CacheStore. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-14642

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: CacheStore. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Design/Logic Flaw

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: CacheStore. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-14642

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: CacheStore. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-14642

CVE-2020-14642 affects Oracle Coherence (Fusion Middleware) CacheStore. Affected versions: 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability permits an unauthenticated remote attacker over HTTP to cause a hang or complete DoS in Oracle Coherence. CVSS 3.1 base score 7....

CVE-2020-14642: Improper Resource Shutdown or Release

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: CacheStore. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2020-3385

Name of the Vulnerable Software and Affected Versions Oracle Coherence versions 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 Description The issue is related to insufficient access controls in the CacheStore component of Oracle Coherence, allowing a remote attacker to cause a denial of...

Oracle Coherence (Jan 2020 CPU)

The version of the tested product installed on the remote host is prior to tested version. It is, therefore, affected by a remote code execution vulnerability, as referenced in the January 2020 Oracle CPU advisory. Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware componen...

Oracle Coherence CacheStore Unauthorized Access

The vulnerability of the Caching, CacheStore, and Invocation components of the Oracle Coherence data processing software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through the HT...