ai.hyacinth.framework:core-service-admin-server (>=0.5.0 <=0.5.24), ai.hyacinth.framework:core-service-discovery-server (>=0.5.0 <=0.5.24) +5475 more potentially affected by CVE-2020-26259 via com.thoughtworks.xstream:xstream (>=1.1.1 <=1.4.14)

com.thoughtworks.xstream:xstream MAVEN version =1.1.1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =Finchley.SR4, =1.0.0.RELEASE, =1.1.0.RELEASE, =1.0.0.RELEASE, =1.1.1.RELEASE, =0.3.3, =0.4.0, =0.4.2 and more Source cves: CVE-2020-26259 Source advisory: OSV:GHSA-JFVX-7WRX-43FH...

ai.hyacinth.framework:core-service-admin-server (>=0.5.8 <=0.5.21), ai.hyacinth.framework:core-service-api-support (>=0.5.8 <=0.5.21) +3175 more potentially affected by CVE-2018-15756 via org.springframework:spring-core (>=5.1.0.RELEASE <=5.1.19.RELEASE)

org.springframework:spring-core MAVEN version =5.1.0.RELEASE, =0.5.8, =0.5.8, =0.5.8, =0.5.8, =0.5.8, =0.5.8, =0.5.8, =0.5.8, =0.5.8, =0.5.8, =0.5.8, =0.5.8, =0.5.8, =0.5.8, =0.5.8, =0.5.21 and more Source cves: CVE-2018-15756 Source advisory: OSV:GHSA-FFVQ-7W96-97P7...

ai.hyacinth.framework:core-service-admin-server (>=0.5.8 <=0.5.21), ai.hyacinth.framework:core-service-gateway-server (>=0.5.8 <=0.5.21) +38 more potentially affected by CVE-2020-5398 via org.springframework:spring-webflux (>=5.1.0.RELEASE <=5.1.12.RELEASE)

org.springframework:spring-webflux MAVEN version =5.1.0.RELEASE, =0.5.8, =0.5.8, =0.5.8, =0.5.0, =1.1.1.RELEASE, =1.0.6.RELEASE, =1.0.0, =1.3.5, =1.0.4.RELEASE, =1.7.0, =1.1.1-Greenwich, =1.1.1-Greenwich, =1.1.2-Greenwich and more Source cves: CVE-2020-5398 Source advisory: OSV:GHSA-8WX2-9Q48-VM9...

ai.hyacinth.framework:core-service-admin-server (>=0.5.2 <=0.5.5), ai.hyacinth.framework:core-service-gateway-server (>=0.5.2 <=0.5.5) +198 more potentially affected by CVE-2019-11284 via io.projectreactor.netty:reactor-netty (>=0.8.0.RELEASE <=0.8.10.RELEASE)

io.projectreactor.netty:reactor-netty MAVEN version =0.8.0.RELEASE, =0.5.2, =0.5.2, =0.5.2, =0.0.3, =0.0.9 and more Source cves: CVE-2019-11284 Source advisory: OSV:GHSA-J52R-XC68-Q8F4...

The vulnerability of the Administration sub-component of the Oracle Mobile Field Service component in the Oracle E-Business Suite, which allows a perpetrator to modify protected data.

The vulnerability of the Administration sub-component of the Oracle Mobile Field Service component in the Oracle E-Business Suite enterprise automation system. Exploiting this vulnerability allows a malicious actor to remotely access and modify, add, or delete protected data through HTTP requests...

XML External Entities (XXE)

gateway-service-admin is vulnerable to XML external entities XXE attacks. The vulnerability exists due to the improper default configuration in XMLInputFactory where external entities were not disabled, allowing them to be specified and disclosed when parsed...

Zimbra Collaboration Server LFI

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 'Zimbra Collaboration Server LFI', 'Description' = %q This module exploits a local file inclusion on Zimbra...