PT-2022-37266 · Apache · Apache Commons Configuration2

Name of the Vulnerable Software and Affected Versions: Apache Commons Configuration2 affected versions not specified Description: The issue is related to a security exception in the java.util.Collections$UnmodifiableCollection.forEach method, which is called by...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in org.yaml.snakeyaml.parser.ParserImpl$ParseBlockMappingValueComment.produce

Detailed Report: https://oss-fuzz.com/testcase?key=5029703743832064 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

Security Bulletin: Vulnerability in Apache Commons affects IBM WebSphere Application Server (CVE-2015-7450)

Summary An Apache Commons Collections vulnerability for handling Java object deserialization was addressed by WebSphere Application Server and WebSphere Application Server Hypervisor Edition. This vulnerability does not affect the IBM HTTP Server or versions of WebSphere Application Server prior ...

Security Bulletin: IBM Sterling Connect:Direct for UNIX is vulnerable to remote code execution due to Apache Commons Configuration (CVE-2022-33980)

Summary IBM Sterling Connect:Direct for UNIX object storage file IO exits, and IBM Sterling Connect:Direct for UNIX components Install Agent and File Agent are vulnerable to remote code execution due to Apache Commons Configuration CVE-2022-33980. Apache Commons Configuration has been upgraded to...

Security Bulletin: Apache Commons Configuration Vulnerability affects IBM SPSS Analytic Server [CVE-2022-33980]

Summary There is a vulnerability in the version of Apache Commons Configuration that was included in IBM SPSS Analytic Server. This vulnerability has been addressed. CVE-2022-33980 Vulnerability Details CVEID:CVE-2022-33980 DESCRIPTION: Apache Commons Configuration could allow a remote attacker t...

Security Bulletin:IBM TRIRIGA Application Platform discloses CVE-2020-13956

Summary IBM TRIRIGA Application Platform discloses CVE-2020-13956 Vulnerability Details CVEID:CVE-2020-13956 DESCRIPTION: Apache HttpClient could allow a remote attacker to bypass security restrictions, caused by the improper handling of malformed authority component in request URIs. By passing...

OSV-2022-782 Security exception in java.base/java.lang.StringBuffer.append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50600 Crash type: Security exception Crash state: java.base/java.lang.StringBuffer.append org.apache.commons.jxpath.ri.compiler.CoreFunction.toString java.base/java.lang.String.valueOf...

PT-2022-37217

Name of the Vulnerable Software and Affected Versions Apache Commons JXPath affected versions not specified Description A security exception crash has been reported in Apache Commons JXPath. The crash occurs in the toString function of CoreFunction and involves the append method of...

apache-commons-jxpath:JXPathFuzzer: Security exception in java.base/java.lang.StringBuffer.append

Detailed Report: https://oss-fuzz.com/testcase?key=5621621733326848 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Security Bulletin: IBM Sterling B2B Integrator vulnerable to multiple vulnerabilities due to Apache Commons Compress

Summary IBM Sterling B2B Integrator has addressed the security vulnerabilities. Vulnerability Details CVEID:CVE-2021-35516 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by an out-of-memory error when large amounts of memory are allocated. By reading a...

PT-2022-37209 · Apache · Apache Commons Jxpath

Name of the Vulnerable Software and Affected Versions: Apache Commons JXPath affected versions not specified Description: A security exception crash has been reported in Apache Commons JXPath. The crash occurs in the org.apache.commons.jxpath.ri.axes package, specifically in the...

OSV-2022-764 Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50458 Crash type: Security exception Crash state: org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesize org.apache.commons.jxpath.ri.compiler.CoreOperation.toString...

PT-2022-37208 · Apache · Apache Commons Jxpath

Name of the Vulnerable Software and Affected Versions: Apache Commons JXPath affected versions not specified Description: The issue is related to a security exception in the Apache Commons JXPath library. The crash occurs in the parenthesize method of CoreOperation and the toString method of...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Intelligent Operations Center products (CVE-2016-3092)

Summary IBM WebSphere Application Server is shipped as a component of IBM Intelligent Operations Center and related products. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details CVEID: CVE-2016-3092...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesize

Detailed Report: https://oss-fuzz.com/testcase?key=5342279308541952 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Security Bulletin: Vulnerability in Apache Commons in IBM WebSphere Application Server affects Intelligent Operations Center and related products (CVE-2015-7450)

Summary Remote execution vulnerability in Apache Commons Collections affects Intelligent Operations Center components WebSphere Application Server WAS or WAS Hypervisor Edition. Vulnerability Details CVE ID :CVE-2015-7450 Description: Apache Commons Collections could allow a remote attacker to...

OSV-2022-743 Security exception in org.apache.commons.jxpath.ri.parser.XPathParser.MultiplicativeExpr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50363 Crash type: Security exception Crash state: org.apache.commons.jxpath.ri.parser.XPathParser.MultiplicativeExpr org.apache.commons.jxpath.ri.parser.XPathParser.SubtractiveExpr...

OSV-2022-729 Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50372 Crash type: Security exception Crash state: org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue...

PT-2022-37193

Name of the Vulnerable Software and Affected Versions Apache Commons JXPath affected versions not specified Description A security exception occurs in the org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue function, leading to a crash. Recommendations At the moment, there is...

PT-2022-37198

Name of the Vulnerable Software and Affected Versions Apache Commons JXPath affected versions not specified Description The issue is related to a security exception in the XPathParser component of Apache Commons JXPath. The crash occurs in the MultiplicativeExpr, SubtractiveExpr, and AdditiveExpr...