CVE-2020-14863

The CVE-2020-14863 entry affects Oracle E-Business Suite One-to-One Fulfillment Print Server in versions 12.1.1–12.1.3. An unauthenticated attacker with network access via HTTP can compromise the component; attacks require user interaction and may lead to unauthorized access to data and unauthori...

CVE-2020-14863

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1 - 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2020-14819

CVE-2020-14819 affects Oracle E-Business Suite One-to-One Fulfillment (Print Server) version 12.1.3. The issue allows an unauthenticated attacker, via HTTP over the network, to access or modify data in Oracle One-to-One Fulfillment after requiring user interaction. The base CVSS 3.1 score is 8.2 ...

CVE-2020-14819

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillmen...

CVE-2020-14819

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillmen...

A performance and functionality update is available for Windows 7 and for Windows Server 2008 R2

A performance and functionality update is available for Windows 7 and for Windows Server 2008 R2 Introduction This article describes an update for Windows 7 and for Windows Server 2008 R2. This update provides a set of performance and functionality improvements to graphics, XPS, and Media...

End of support for Office 2016 and Office 2019

None None...

Cross-Site Scripting (XSS)

mapfish-print is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via JSONP...

XML External Entity (XXE) Injection

print-lib/print-servlet is vulnerable to XML External Entity XXE injection. A remote attacker is able to inject untrusted XML entity via tryLoadSLD as SDL parser does not disable DTDs...

OSV-2020-1965 UNKNOWN READ in asn1_item_print_ctx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13920 Crash type: UNKNOWN READ Crash state: asn1itemprintctx asn1templateprintctx asn1itemprintctx...

CVE-2020-15231

In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting...

CVE-2020-15232

In mapfish-print before version 3.24, a user can do to an XML External Entity XXE attack with the provided SDL style...

CVE-2020-15232

In mapfish-print before version 3.24, a user can do to an XML External Entity XXE attack with the provided SDL style...

CVE-2020-15231

In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting...

Cross site scripting

In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting...

Xxe

In mapfish-print before version 3.24, a user can do to an XML External Entity XXE attack with the provided SDL style...

CVE-2020-15232

The CVE-2020-15232 issue affects mapfish-print prior to version 3.24, where XML External Entity (XXE) processing is vulnerable via the SDL parser (DTDs are not disabled), enabling an attacker to inject untrusted entities. Public advisories describe remote XXE exploitation, with remediation statin...

CVE-2020-15232 XML External Entity attack in mapfish-print

In mapfish-print before version 3.24, a user can do to an XML External Entity XXE attack with the provided SDL style...

CVE-2020-15231

CVE-2020-15231 affects mapfish-print prior to version 3.24. A JSONP misuse in mapfish-print allows Cross-site Scripting, enabling an attacker to inject and execute arbitrary JavaScript in a user’s browser via JSONP. Remediation per advisories is to upgrade to version 3.24 or later. The connected ...

The vulnerability of the Windows Print Spooler service in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Print Spooler service in Windows operating systems is related to insufficient control over access permissions. Exploiting this vulnerability can allow attackers to enhance their privileges by running a specially created application...