CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

RedHat Linux•added 2023/07/19 5:27 p.m.•5 views

OpenJDK: HTTP client insufficient file name validation (8302475)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle...

3.1CVSS7.3AI score0.00866EPSS

RedHat Linux•added 2023/07/19 5:24 p.m.•6 views

OpenJDK: HTTP client insufficient file name validation (8302475)

3.1CVSS7.3AI score0.00866EPSS

RedHat Linux•added 2023/07/19 5:24 p.m.•3 views

OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312)

3.7CVSS7.2AI score0.01316EPSS

RedHat Linux•added 2023/07/19 5:23 p.m.•5 views

OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312)

3.7CVSS7.2AI score0.01316EPSS

7.6CVSS7.3AI score0.00468EPSS

CVE-2023-22060

Vulnerability in the Oracle Hyperion Workspace product of Oracle Hyperion component: UI and Visualization. The supported version that is affected is 11.2.13.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Workspace...

OSV•added 2023/07/18 9:15 p.m.•7 views

CVE-2023-22055

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are Prior to 9.2.7.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

6.1CVSS7.3AI score0.00327EPSS

OSV•added 2023/07/18 9:15 p.m.•4 views

DEBIAN-CVE-2023-22043

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u371. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability...

5.9CVSS5.8AI score0.00974EPSS

3.7CVSS5.9AI score0.01316EPSS

DEBIAN-CVE-2023-22049

OSV•added 2023/07/18 9:15 p.m.•1 views

CVE-2023-22035

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite component: iSurvey Module. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful...

6.1CVSS5.8AI score0.00363EPSS

OSV•added 2023/07/18 9:15 p.m.•5 views

AZL-27475 CVE-2023-22038 affecting package mysql for versions less than 8.0.34-1

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

2.7CVSS6.4AI score0.00782EPSS

OSV•added 2023/07/18 9:15 p.m.•1 views

CVE-2023-22020

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

5.4CVSS7.3AI score0.0032EPSS

OSV•added 2023/07/18 9:15 p.m.•4 views

CVE-2023-22012

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. The supported version that is affected is 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

4.3CVSS7.3AI score

OSV•added 2023/07/18 9:15 p.m.•2 views

CVE-2023-22011

5.4CVSS7.3AI score0.00405EPSS

3.1CVSS5.2AI score0.00866EPSS

DEBIAN-CVE-2023-22006

5.6CVSS7.3AI score0.00321EPSS

CVE-2023-21983

Vulnerability in the Application Express Administration product of Oracle Application Express component: None. Supported versions that are affected are Application Express Administration: 18.2-22.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

OSV•added 2023/07/18 9:15 p.m.•2 views

CVE-2023-22004

Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite component: Reports Configuration. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

4.3CVSS7.3AI score0.00401EPSS