Unspecified Vulnerability in Oracle Identity Manager (CNVD-2020-09673)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, etc. Identity Manager is one of the enterprise identity management system components. An unspecifi...

Oracle Ties Previous All-Time Patch High with January Updates

Oracle has patched 334 vulnerabilities across all of its product families in its January 2020 quarterly Critical Patch Update CPU. Out of these, 43 are critical/severe flaws carrying CVSS scores of 9.1 and above. The CPU ties for Oracle’s previous all-time high for number of patches issued, in Ju...

Oracle Enterprise Manager for Fusion Middleware CVE-2020-2614 Remote Security Vulnerability

Description Oracle Enterprise Manager for Fusion Middleware is prone to a remote security vulnerability. The vulnerability can be exploited over 'HTTP' protocol. The 'APM Mesh' component is affected. This vulnerability affects the following supported versions: 13.2, 13.3 Technologies Affected...

ecstatic denial of service vulnerability

ecstatic is a simple static file server middleware. A denial of service vulnerability exists in ecstatic. An attacker could exploit this vulnerability to cause the application to crash...

Oracle Application / HTTP Server Detection (HTTP)

HTTP based detection of the Oracle Application Server AS or Oracle HTTP Server. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

Cross site scripting

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

CVE-2013-7370

CVE-2013-7370 concerns node-connect before 2.8.1, which has an XSS vulnerability in the Sencha Labs Connect middleware. Affected component: node-connect (Sencha Connect middleware). Root cause/impact: XSS in the middleware could reflect or inject script via user input; exploitation status is not ...

CVE-2013-2166

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...

CVE-2013-2167

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

PYSEC-2019-197

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...

Privilege escalation

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...

PYSEC-2019-161

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

PYSEC-2019-161

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

CVE-2013-2167

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

CVE-2013-2167

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

CVE-2013-2166

The CVE-2013-2166 entry concerns python-keystoneclient versions 0.2.3 to 0.2.5, where the middleware memcache encryption bypass is documented. Multiple connected records (GHSA-C3XQ-CJ8F-7829 and OSV entries) confirm the same issue and reference advisories like RHSA-2013:0992. The vulnerability ce...