19 matches found
jsonorg-fp2
json.org CVE-2022-45688 false positive The project contains a json.org dependency with CVE-2022-45688. It does invoke the vulnerable class, but the input data is hardcoded and not suitable to trigger a DoS attack. The vulnerability can therefore not be exploited for a DoS attack. Both...
jsonorg-fp1
json.org CVE-2022-45688 false positive The project contains a json.org dependency with CVE-2022-45688 but does not invoke the vulnerable class. The vulnerability can therefore not be exploited for a DoS attack. Metadata-based software composition analyses will produce a false positive, while...
jsonorg-fn1
json.org CVE-2022-45688 false negative The project illustrates CVE-2022-45688 in json.org -- there is a simple application XML2JSONConverter to read XML from input, convert it to JSON and pretty-print it to the console. Using malicious input, the application crashes with a stackoverflow. The test...
ROOT-APP-MAVEN-CVE-2022-45688 CVE-2022-45688 in org.json:json - Patched by Root
Root has patched CVE-2022-45688 in the org.json:json package for Root:Maven. Multiple fixed versions available...
CVE-2022-45688
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...
Oracle Siebel Server <= 23.5 (July 2023 CPU)
The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2023 CPU advisory. - Vulnerability in the Siebel CRM product of Oracle Siebel CRM component: EAI JSON-java. Supported versions that are affected are 23.5 and prior...
Exploit for Out-of-bounds Write in Hutool
json.org CVE-2022-45688 false positive The project contains...
Exploit for Out-of-bounds Write in Hutool
json.org CVE-2022-45688 false positive The project contains...
Exploit for Out-of-bounds Write in Hutool
json.org CVE-2022-45688 true positive The project illustrate...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Hutool [ CVE-2022-45688]
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Hutool, caused by stack-based buffer overflow CVE-2022-45688. Hutool is a component used by our Speech microservices. This vulnerabilitiy has been addressed. Please read the details for...
Oracle Business Process Management Suite (Oct 2023 CPU)
The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the October 2023 CPU advisory. Specifically: - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component...
Oracle Primavera Gateway (October 2023 CPU)
The versions of Primavera Gateway installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2023 CPU advisory. - Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering component: Admin JSON-java. Supported versions that are...
Security Bulletin: Vulnerability in Hutool affects IBM Process Mining . CVE-2022-45688
Summary There is a vulnerability in Hutool that could allow a remote attacker to execute a denial of service. The code is used by IBM Process Mining. This bulletin identifies the security fixes to apply to address the vulnerability. Vulnerability Details CVEID:CVE-2022-45688 DESCRIPTION: Hutool i...
CVE-2022-45688 -A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data. Products Confirmed Not Affected No Brocade Fibre Channel Product from Broadcom Products is known to be affected by this vulnerability...
Security Bulletin: json-20220320.jar is vulnerable to CVE-2022-45688 used in IBM Maximo Application Suite
Summary IBM Maximo Application Suite uses json-20220320.jar which is vulnerable to CVE-2022-45688 Vulnerability Details CVEID:CVE-2022-45688 DESCRIPTION: Affected versions of this package are vulnerable to Denial of Service DoS in the XML.toJSONObject component via crafted JSON or XML data. CVSS...
CVE-2022-45688
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...
CVE-2022-45688
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...
CVE-2022-45688
CVE-2022-45688 : Hutool-JSON's XML.toJSONObject has a stack-based overflow that can cause a DoS via crafted JSON/XML data. The connected documents confirm the vulnerability and impact (availability impact: HIGH) with no public exploit details or remediation/version fixes provided in the supplied ...