Oracle JD Edwards Products 安全漏洞

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle. The products offer application modules for financial management, project management, and asset lifecycle management. A security vulnerability exists in Oracle JD Edwards' JD Edward...

Oracle JD Edwards Products 安全漏洞

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle. The products offer application modules for financial management, project management, and asset lifecycle management. A security vulnerability exists in Oracle JD Edwards Products f...

PT-2023-2649

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools versions prior to 9.2.7.3 Description The issue is related to insufficient input validation in the Interoperability SEC component. It allows a low-privileged attacker with network access via HTTP to compromise JD...

PT-2023-2654

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools versions prior to 9.2.7.3 Description The issue is related to insufficient input validation in the Web Runtime SEC component. It allows a low-privileged attacker with network access via HTTP to compromise JD...

CVE-2023-21936: Undefined Security Weakness

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are Prior to 9.2.7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseO...

CVE-2023-21927: Undefined Security Weakness

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Interoperability SEC. Supported versions that are affected are Prior to 9.2.7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

Design/Logic Flaw

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

Deserialization of untrusted data

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

JD-GUI 代码问题漏洞

JD-GUI is a Java Decompiler open source independent graphical utility . Displays the Java source code in a CLASS file. A security vulnerability exists in JD-GUI version 1.6.6, which originated when the program allowed an attacker to deserialize it via UIMainWindowPreferencesProvider.singleInstanc...

JD-GUI 跨站脚本漏洞

JD-GUI is a Java Decompiler open source independent graphical utility . Displays the Java source code in a CLASS file. A security vulnerability exists in JD-GUI version 1.6.6, which originates from a program that allows attackers to conduct XSS attacks via...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

CVE-2023-26234

CVE-2023-26234 affects JD-GUI 1.6.6 and is caused by deserialization via UIMainWindowPreferencesProvider.singleInstance. Several connected records (NVD, Red Hat, OSV, CNNVD, etc.) corroborate the issue, with CVSS 3.1/3.1 base score 9.8 (CRITICAL) and potential full impact on confidentiality, inte...

PT-2023-20552

Name of the Vulnerable Software and Affected Versions JD-GUI version 1.6.6 Description The issue allows deserialization via UIMainWindowPreferencesProvider.singleInstance. Recommendations For JD-GUI version 1.6.6, at the moment, there is no information about a newer version that contains a fix fo...